Internal Auditor (Management Systems & Information Security)

Quick Facts

• Role: Internal Auditor (Management Systems & Information Security)

Description

You will conduct internal audits of integrated management systems, focusing on verifying compliance and effectiveness according to ISO 9001, ISO 14001, and ISO/IEC 27001. Audits also include assessment of compliance with relevant EU and national regulatory requirements, especially for EASA and ATM/ANS areas and for information/cybersecurity. Audits are planned, performed, documented, and evaluated in accordance with ISO 19011.

Responsibilities

• Plan and perform internal audits of the integrated management system across the organization and its subsidiaries
• Perform audits according to ISO 9001, ISO 14001, and ISO/IEC 27001
• Verify compliance with EU and national legislation and regulatory requirements, especially for EASA and ATM/ANS areas
• Assess compliance with relevant EASA requirements, including information and cybersecurity requirements
• Verify requirements fulfillment for information security management and cybersecurity, including applicable legislation and security frameworks
• Audit selected processes, workplaces, organizational units, and (as needed) significant suppliers
• Evaluate adequacy and effectiveness of technical, organizational, and process measures
• Verify process operation (risk management, document management, incident management, supplier management, change management, corrective actions, continuous improvement)
• Check correctness and effectiveness of implemented controls and measures, including practical application
• Identify nonconformities, gaps, and improvement opportunities
• Prepare audit reports, maintain findings evidence, and track corrective action implementation
• Communicate audit results with responsible employees
• (As needed) support preparation for external audits, certification, and regulatory inspections

Requirements

• At least 3 years of experience performing internal audits of management systems
• Practical knowledge of audit principles according to ISO 19011
• Good knowledge of at least one of ISO 9001, ISO 14001, ISO/IEC 27001
• Familiarity with legal and regulatory requirements relevant to information and cybersecurity
• Knowledge of EASA requirements relevant to the organization’s activities, or willingness to develop in this area
• Ability to assess effectiveness and practical functioning—not only formal compliance
• Analytical and systematic thinking; ability to work with evidence and formulate objective audit conclusions
• Ability to independently plan and carry out an audit from preparation to final reporting
• Ability to communicate professionally with auditees at various organizational levels
• English at a communicative level
• Independence, responsibility, and professional behavior

Benefits

• 25 vacation days plus time off between Christmas holidays
• Flexible working hours with a fixed core time of 9:00–14:30
• Home office option
• Meal allowance
• Cafeteria benefits (12,000 CZK per year into the Benefit Plus cafeteria system)
• Company events, annual bonus, referral reward for recommending a new employee, and more