Back to jobs
Information Security Audit & Risk Management Specialist
Successfully
Req. VR-121726
Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients.
The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client.
This position is aligned within TDI/CSO Enterprise Security Architecture & Enablement supporting the Security Design Authority, the team with responsibility for security architecture governance through review of new and changing assets to ensure that they are secure by design and adhere to our client's security controls policies, standards, guidelines, and procedures.
On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.
We are seeking an experienced Information Security Audit & Risk Management Specialist to support global security functions in managing information security risk, audit findings, and regulatory obligations. The role focuses on driving transparency of risk exposure, supporting remediation activities, and ensuring effective governance across complex, multi-stakeholder environments.
Support the information security audit lifecycle by participating in internal and external auditor calls, coordinating subject matter experts, and ensuring timely collection of required documentation.
Drive effective findings management by supporting finding owners throughout the lifecycle, providing constructive feedback on documentation quality, risk implications, and opportunities for improvement.
Collaborate closely with audit managers, finding owners, and risk stakeholders through regular meetings and written communication to ensure timely remediation of audit findings.
Ensure accurate and compliant management of audit findings, including tracking milestones, meeting regulatory deadlines, and proactively escalating risks or delays.
Provide regular and ad-hoc status updates on audit findings to senior management and other stakeholders, ensuring transparency and early issue escalation.
Maintain and continuously update internal trackers, training materials, and supporting documentation related to audit and findings management.
Monitor and apply updates to key operating procedures and documentation standards for findings management to ensure ongoing compliance with latest requirements.
Must have
Proven experience in information security risk management, audit coordination, or regulatory compliance within the financial services or technology sector.
Strong understanding of audit findings management, issue remediation, and control frameworks in regulated environments.
Excellent stakeholder management and communication skills, with the ability to translate security and risk topics for both technical and non-technical audiences.
Strong analytical and organizational skills, with experience managing multiple priorities and tight deadlines.
Advanced proficiency in Microsoft Office tools (Excel, PowerPoint); experience with risk tracking tools or dashboards is an advantage.
Comfortable driving topics forward with all sorts of stakeholders, including persistent follow-ups where necessary, in fast-paced and deadline-driven environments
Nice to have
Experience supporting large-scale security, cloud, or infrastructure-related risk initiatives.
Familiarity with information security or risk certifications (e.g. CISSP, CISM, CISA, CRISC).
Experience working with globally distributed teams across multiple time zones.
Languages
English: B2 Upper Intermediate
Seniority
Regular
Bucharest, Romania
Req. VR-121726
Cybersecurity
BCM Industry
17/03/2026
Req. VR-121726
Apply for Information Security Audit & Risk Management Specialist in Bucharest
*Indicates a required field