Cybersecurity Auditor

We are looking for an independent Cybersecurity Auditor to conduct a formal cybersecurity audit of 22 critical systems, covering industrial systems, information systems, and technical infrastructure for a regulated critical infrastructure environment. The audit will follow the NKSC-approved methodology and the Lithuanian Cybersecurity Law (KSĮ), with a focus on technical and organisational control assessment, maturity evaluation, and audit-grade documentation supported by qualified electronic signatures.

Key Responsibilities:

• Conduct interviews with system administrators and review evidence across 22 critical systems
• Assess compliance with KSĮ using a 3-level maturity scale
• Evaluate baseline cybersecurity controls, identify non-conformities, and prepare a remediation action plan
• Prepare and agree on an Audit Plan within the required timeline, including interim and final audit reporting
• Present findings during a closing meeting and deliver complete audit-grade documentation signed with qualified electronic signatures
• Maintain full independence, impartiality, and conflict-of-interest compliance throughout the engagement
  
  
  

Must-Have Requirements:

• Certified information systems security compliance auditor from an internationally recognised organisation, such as CISA, ISO 27001 Lead Auditor, or equivalent
• Completion of NKSC-prescribed training and successful qualification examination
• Strong knowledge of KSĮ, NIS2-aligned frameworks, and applicable Lithuanian regulatory requirements
• Full compliance with NKSC independence, impartiality, and integrity requirements
• Ability to work as part of a team of up to 3 auditors, with all members meeting minimum qualification requirements
• No operational or management responsibility for any systems being assessed
• No conflict of interest with the audited entity, with any conflict reported in writing within the required timeframe
  
  
  

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Start Date: ASAP

Duration: 3 months with possible extension

Language: Lithuanian