Information Security Auditor

Placements24; Kimberley; Hybrid; CAD 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Professional development

Annual leave

Job summary

Placements24 is assisting a client in Kimberley, Canada, in recruiting an Information Security Auditor. The role focuses on evaluating security controls, ensuring policy adherence, and identifying compliance gaps within the organization.

You will conduct audits, document findings, and provide practical recommendations to strengthen the security posture across business units. A solid understanding of ISO 27001 and NIST frameworks is essential.

Qualifications

• 3+ years of experience in information security auditing, risk management, or compliance.
• Solid understanding of information security principles and frameworks (ISO 27001, NIST).
• Experience with audit methodologies and documentation.
• Certifications such as CISA, CRISC, or CISSP are highly desirable.

Responsibilities

• Plan and execute information security audits across business units and systems.
• Assess compliance with internal security policies and regulatory requirements.
• Evaluate design and operation of security controls, including access and data security.
• Document findings and develop actionable remediation recommendations.
• Prepare audit reports for management and stakeholders.
• Follow up on audit recommendations to ensure remediation.

Skills

Information security auditing

Risk management

Compliance

Analytical thinking

Documentation

Education

Bachelor's degree in Computing/Information Systems/Accounting

Job description

About the Role

Our client is seeking a meticulous and analytical Information Security Auditor to join their compliance and assurance team in Kimberley. This role is responsible for evaluating the effectiveness of the organization's security controls and ensuring adherence to internal policies, industry standards, and regulatory requirements. You will conduct audits, identify compliance gaps, and provide recommendations for improvement to strengthen the overall security posture. This is an excellent opportunity to contribute to the integrity and trustworthiness of the organization's information systems.

Key Responsibilities

• Plan and execute information security audits across various business units and systems.
• Assess compliance with internal security policies, procedures, and relevant regulations (e.g., POPIA, GDPR).
• Evaluate the design and operational effectiveness of security controls, including access management, data security, and network security.
• Document audit findings, identify non-compliance issues, and develop actionable recommendations.
• Prepare detailed audit reports for management and stakeholders.
• Follow up on audit recommendations to ensure timely and effective remediation.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• 3+ years of experience in information security auditing, risk management, or compliance.
• Solid understanding of information security principles, frameworks (e.g., ISO 27001, NIST), and common control objectives.
• Experience with audit methodologies and documentation.
• Strong analytical, critical thinking, and problem-solving skills.
• Relevant certifications such as CISA, CRISC, or CISSP are highly desirable.

Benefits

• Competitive salary and performance-based incentives.
• Comprehensive health insurance and retirement plan.
• Opportunities for professional development and certification training.
• Generous annual leave and company holidays.
• A structured and supportive work environment focused on accuracy and compliance.