Senior InfoSec Auditor (Germany, Remote)

View full description

Requirements:

• Thorough understanding of the Common Criteria (ISO/IEC 15408) and federal certifications.
• Familiarity with Common Evaluation Methodology (CEM) and related documentation.
• In-depth knowledge of IT systems, including hardware, software, and networks.
• Ability to analyze technical specifications and documentation.
• Experience in a role focused on Common Criteria audits, effective communication across teams, and relevant industry certifications preferable.

Responsibilities:

• Serve as the primary lead and point of contact in the evaluation and certification process of information technology products and systems.
• Evaluate product/system against the specified evaluation assurance level (EAL).
• Assess security features, design, implementation, and documentation of products/systems.
• Perform hands-on testing and develop a comprehensive audit plan.
• Interact with product developers and stakeholders to communicate audit progress and findings.