Cybersecurity Auditor - IT Asset Management & Policy Oversight

About the role

The Information Systems Agency of Armenia supports the creation of an e-society, implementing standards for public services and digital projects under the Government and the Central Bank of Armenia. As a Cybersecurity Auditor focused on IT Asset Management and Policy Oversight, you will assess the effectiveness of security controls, validate compliance with baseline requirements and help organisations turn security policy into practical, measurable implementation. You will work cross-functionally with technical teams, policy and legal stakeholders and external partners.

Key responsibilities

• Plan and conduct cybersecurity audits and control assurance activities (policy, process and technical controls) and document findings with clear, risk-based remediation guidance.
• Support the development and maintenance of baseline cybersecurity controls and assessment criteria aligned with international standards and good practice.
• Strengthen IT asset management governance: define and assess inventory requirements, ownership and accountability, classification, lifecycle management and evidence expectations.
• Assess third-party and supply chain security risks, including supplier security requirements and control validation.
• Maintain and report a consolidated view of control maturity, audit findings and remediation progress through dashboards and executive summaries.
• Collaborate with SOC and incident response teams to incorporate lessons learned into updated controls and assurance priorities.
• Support stakeholder engagement and capacity building (briefings, workshops, guidance) to improve adoption of security policies and audit readiness.

Required profile

• 5+ years of experience in cybersecurity audit, IT risk management, GRC or information security assurance.
• Preferred: experience in regulated or critical infrastructure environments, with IT asset management practices and tooling (CMDB/inventory approaches).
• Preferred: experience with security metrics, maturity models and risk reporting; familiarity with EU-aligned concepts such as NIS2.
• Professional working proficiency in Armenian and English; occasional travel to customer sites is required.

Required skills

• Working knowledge of ISMS concepts and control frameworks (ISO/IEC 27001, NIST CSF, CIS Controls, COBIT or equivalents).
• Ability to evaluate technical control evidence (secure configuration, access control, logging, vulnerability management, network security).
• Analytical and writing skills for audit plans, findings and remediation recommendations.
• Ability to work with diverse stakeholders and manage multiple parallel workstreams.

Certifications such as CISA, CRISC, ISO/IEC 27001 Lead Auditor, CISM or CISSP are an advantage. To apply, send your CV by email to the agency's HR department, mentioning the position name in the subject line.