8 annunci per il ruolo di internal auditor (recruiting in corso)

Lead Security Engineer
RemoFirst —Provincia di Bergamo, Lombardia
- Tempo pieno
- Remoto
- Java
- AWS
- API
Candidatura rapida
Supplier Quality Engineer
Enovis —San Daniele del Friuli, Friuli-Venezia Giulia
- Tempo pieno
- Microsoft Excel
- Ingegneria
- Inglese
Senior Expert – Change Management (ITSM)
FinecoBank S.p.A. —Milano, Lombardia
- Gestionale
- DevOps
- IT
Candidatura rapida
FRONT OFFICE AGENT - Borgo San Felice Resort - Stagione 2026
Borgo San Felice Resort —Castelnuovo Berardenga, Toscana
- 20.000 € - 25.000 € all'anno
- Tempo pieno
- Esperienza settore turistico alberghiero
- Gestionale
- Inglese
- Vitto
Candidatura rapida
Junior Auditor - Categorie Protette Firenze
KPMG —Firenze, Toscana
- 25.500 € - 28.000 € all'anno
- Inglese
- Laurea magistrale
- Leadership
Contabile - Accountant Italy
Data4 —Cornaredo, Lombardia
- Tempo pieno
- Microsoft Excel
- Inglese
- Laurea magistrale
Candidatura rapida
CONSULTANT / SENIOR CONSULTANT – IT GRC & SECURITY
Itway —Milano, Lombardia
- Part-time
- Microsoft Excel
- Informatica
- Ingegneria
Finance Intern
Four Seasons —Milano, Lombardia
- Tempo pieno
- Inglese

More jobs to discover

Find similar jobs that you might be interested in.

Tirocinante-Supplier Quality Engineer
Honda —Atessa, Abruzzo
Percorso di formazione e affiancamento con professionisti esperti del settore. Interesse per i temi della qualità, della produzione e della gestione dei…
800 € - 900 € al mese
Candidatura rapida
10 giorni
Quality Control Engineer
Orthofix —Bussolengo, Veneto
As part of the Quality Team, you will be responsible for defining, approving, and managing control cycles, First Article Inspections (FAI), and supplier returns…
40.000 € - 45.000 € all'anno

Voglio ricevere gli ultimi avvisi Job Alert per il ruolo di internal auditor

Accedendo al tuo account, accetti i Termini di Servizio di SimplyHired e acconsenti alle nostre Norme sui Cookie e sulla Privacy.

Lead Security Engineer

RemoFirst
Provincia di Bergamo, Lombardia

Candidatura rapida

Dettagli della posizione

Tempo pieno

Qualifiche

Spring Boot
Sistemi di autenticazione
SSO
Infrastrutture cloud
MongoDB
Java
RBAC
AWS
SoC
PostgreSQL
API
S3
Kafka
Python
Spring
Audit interni
SDLC

Descrizione completa della posizione

RemoFirst is transforming the way businesses hire and manage global teams. Our mission is to enable Freedom of Work by providing an all-in-one global HR platform that simplifies hiring, compliance, payroll, and benefits management. We partner with some of the world’s most innovative companies, including Fortune 500 businesses and leading startups.

We are a small but strong team of 200+ people (and growing) hyper-focused on delivering a world-class platform and unparalleled service with our industry-leading partnerships.

Core Responsibilities:

1. Identity & Access Management (The Core)
Customer Identity: Own the architecture and security of our Auth0 implementation for client-facing applications. You will be fine-tuning our internal authentication service to support SCIM provisioning and help set up the OIDC federation with our enterprise client’s IdPs.
Internal Identity: Manage and automate our Okta environment, ensuring seamless SSO, lifecycle management (onboarding/offboarding), and hardware-based MFA. Expect a fairly complex internal RBAC and the need to actually speak with the other functions within the organization to understand their ways of working and translate them into security controls
Cloud Identity: Enforce "Least Privilege" across our AWS ecosystem, managing complex AWS IAM policies and Service Control Policies (SCPs).

2. Security Engineering & Pentesting
Offensive Security: Conduct regular internal pentests and vulnerability scans against our Python/Django and Java/Spring Boot services as well as coordinate with 3LOD pen testers
Secure SDLC: Work alongside devs to review code (e.g. implementation of the security library you’ve built), secure our Postgres databases, help engineers with thread modelling and harden our Kafka message streams. You will be the owner of our SAST/DAST and detect license misuse, outdated libraries, and help shape a non-invasive secure SDLC that developers love by building paved roads
AI Security: Define the guardrails for our AI initiatives, ensuring data privacy in LLM prompts and securing our model pipeline.

3. Governance, Risk, and Compliance (GRC)
The Audit Lead: Take the wheel for our SOC 2 Type II and ISO 27001 certifications. You will be a key person in maintaining our internal risk register as well as helping our Front-line teams with inbound security questionnaires from large clients.
Automation: Utilize compliance automation tools to ensure we stay "audit-ready" every single day, not just once a year. You will own our “Trust Center” in Thoropass (our compliance platform)
Policy as Code: Help draft and implement pragmatic security policies that reflect how a modern startup actually works. We are talking about data residency, logging, audit trails, dealing with non-repudiation, etc.

Technical Requirements:

Familiarity with our core tech stack: Python/Java with Django, FastAPI & SpringBoot is at the heart of our services. We are using Kafka & RabbitMQ for interservice communications and PostgreSQL with some MongoDB on our persistence layer
Strong knowledge of Cloud Infrastructure: We use AWS with EKS, RDS as well the traditional IAM, S3, etc.
Internal & User-facing IAM: Comfortable with IAM - some experience with Okta and/or Auth0. Good understanding of protocols like SAML, OIDC, understanding of API-based security
Compliance: Familiarity with the SOC2 and ISO27001 audit cycle, comfortable with working with Risk & Compliance teams, both internal and external

Who You Are:

The Builder: You have 5+ years of experience in security engineering. You prefer an IDE to a spreadsheet.
The Auditor-Translator: You can explain complex ISO 27001 requirements to a software engineer in a way that makes sense to them.
The Pragmatist: You understand that "No" is not always the answer. You find ways to enable the business to move fast, safely.
Bonus points - An AI Enthusiast: You are keeping up with the OWASP Top 10 for LLMs and understand the risks of prompt injection and data leakage.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Candidatura rapida

Perfeziona la tua ricerca

internal auditor offerte

Lead Security Engineer

Supplier Quality Engineer

Senior Expert – Change Management (ITSM)

FRONT OFFICE AGENT - Borgo San Felice Resort - Stagione 2026

Junior Auditor - Categorie Protette Firenze

Contabile - Accountant Italy

CONSULTANT / SENIOR CONSULTANT – IT GRC & SECURITY

Finance Intern

More jobs to discover

Voglio ricevere gli ultimi avvisi Job Alert per il ruolo di internal auditor

Core Responsibilities:

Technical Requirements:

Who You Are:

Strumenti per chi cerca lavoro

Strumenti Aziende

Visualizza

Resta in contatto