Information Security Audit & Risk Management Specialist

Apply
Apply

Share

successfully icon

Successfully

The vacancy has been successfully added to favorites

location icon

Bucharest, Romania

specialization icon

Cybersecurity

lob icon

BCM Industry

date icon

17/03/2026

Req. VR-121726

Apply
Project description

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients.
The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client.
This position is aligned within TDI/CSO Enterprise Security Architecture & Enablement supporting the Security Design Authority, the team with responsibility for security architecture governance through review of new and changing assets to ensure that they are secure by design and adhere to our client's security controls policies, standards, guidelines, and procedures.
On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities
bullet icon

We are seeking an experienced Information Security Audit & Risk Management Specialist to support global security functions in managing information security risk, audit findings, and regulatory obligations. The role focuses on driving transparency of risk exposure, supporting remediation activities, and ensuring effective governance across complex, multi-stakeholder environments.

bullet icon

Support the information security audit lifecycle by participating in internal and external auditor calls, coordinating subject matter experts, and ensuring timely collection of required documentation.

bullet icon

Drive effective findings management by supporting finding owners throughout the lifecycle, providing constructive feedback on documentation quality, risk implications, and opportunities for improvement.

bullet icon

Collaborate closely with audit managers, finding owners, and risk stakeholders through regular meetings and written communication to ensure timely remediation of audit findings.

bullet icon

Ensure accurate and compliant management of audit findings, including tracking milestones, meeting regulatory deadlines, and proactively escalating risks or delays.

bullet icon

Provide regular and ad-hoc status updates on audit findings to senior management and other stakeholders, ensuring transparency and early issue escalation.

bullet icon

Maintain and continuously update internal trackers, training materials, and supporting documentation related to audit and findings management.

bullet icon

Monitor and apply updates to key operating procedures and documentation standards for findings management to ensure ongoing compliance with latest requirements.

Skills

Must have

bullet icon

Proven experience in information security risk management, audit coordination, or regulatory compliance within the financial services or technology sector.

bullet icon

Strong understanding of audit findings management, issue remediation, and control frameworks in regulated environments.

bullet icon

Excellent stakeholder management and communication skills, with the ability to translate security and risk topics for both technical and non-technical audiences.

bullet icon

Strong analytical and organizational skills, with experience managing multiple priorities and tight deadlines.

bullet icon

Advanced proficiency in Microsoft Office tools (Excel, PowerPoint); experience with risk tracking tools or dashboards is an advantage.

bullet icon

Comfortable driving topics forward with all sorts of stakeholders, including persistent follow-ups where necessary, in fast-paced and deadline-driven environments

Nice to have

bullet icon

Experience supporting large-scale security, cloud, or infrastructure-related risk initiatives.

bullet icon

Familiarity with information security or risk certifications (e.g. CISSP, CISM, CISA, CRISC).

bullet icon

Experience working with globally distributed teams across multiple time zones.

Other
seniority icon

Languages

English: B2 Upper Intermediate

seniority icon

Seniority

Regular

Bucharest, Romania

Req. VR-121726

Cybersecurity

BCM Industry

17/03/2026

Req. VR-121726

Apply for Information Security Audit & Risk Management Specialist in Bucharest

*Indicates a required field

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.


Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.


We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.


With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.


Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.


Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.