WELCOME TO SITA At SITA, we keep airports moving, airlines flying smoothly, and borders open. Our technology and communication innovations power the success of the global air travel industry. You'll find us in 95% of international airports, working closely with over 2,500 transportation and government clients. Each partnership brings unique challenges, and we thrive on delivering fresh solutions and cutting-edge tech to keep operations running like clockwork. We don't just move the world forward—we're proud to be recognized as a Great Place to Work® by 79% of our employees and certified in most of our growing locations. Here, we feel empowered, supported, and inspired to grow. Are you ready to love your job? The adventure begins right here, with you, at SITA. PURPOSE The purpose of this role is to perform Cyber Security, IT, and Privacy audits of SITA corporate procedures, processes, and sites throughout the world and to prepare factual audit reports and communications informing management and stakeholders of risk areas and issues. ## KEY RESPONSIBILITIES - Conduct independent cyber security, IT, and Privacy audits according to the approved audit schedule. - Prepare for audits and fieldwork to evaluate: - Cyber Security, IT and Privacy Policies, Standards, and Procedures - Cyber, IT and Privacy governance and operating model - Cyber Security, IT and Privacy risk management - Identity & access management (IAM) - Network and infrastructure security - Cloud security - Application security and SDLC - Data protection and privacy controls - Incident response and cyber resilience - Demonstrate the ability to perform end-to-end audit activities: planning, fieldwork, testing, documentation, and reporting. - Apply data-driven and technical audit techniques (configuration reviews, log analysis, vulnerability assessment review, etc.). - Assess the design, implementation, and operating effectiveness of cybersecurity, IT, and Privacy controls. - Evaluate alignment with recognized frameworks and standards (e.g., NIST CSF, ISO 27001, CIS, COBIT, NIS2, GDPR). - Identify control gaps, weaknesses, and root causes. - Assess management’s remediation plans for adequacy, sustainability, and timeliness. - Ensure compliance with Internal policies, Regulatory, and contractual cyber requirements. - Provide assurance over third-party and supply-chain cyber, IT, and Privacy risk management. - Present audit results to senior management and EMT. - Track and validate remediation actions, including follow-up testing where required.