About the Role
Our client, a leading retail conglomerate, is seeking an experienced Information Security Auditor to join their internal audit department. This role is based in Queenstown, Eastern Cape, ZA , and requires a full-time commitment in the office to facilitate direct interaction with IT teams and management. You will be responsible for evaluating the effectiveness of the organization's IT controls and ensuring compliance with security policies, standards, and relevant regulations. This position is vital in maintaining the integrity and security of the company's information assets and systems.
Key Responsibilities
- Plan and execute information security audits across various IT systems and applications.
- Assess the design and operational effectiveness of IT controls, including access controls, data security, and network security.
- Identify control weaknesses, security risks, and non-compliance issues.
- Develop detailed audit reports with findings, recommendations, and management action plans.
- Follow up on audit recommendations to ensure timely and effective remediation.
- Stay updated on IT audit best practices, emerging threats, and regulatory requirements.
- Collaborate with IT management and staff to facilitate audit processes and communicate findings.
- Participate in risk assessments and contribute to the development of the annual audit plan.
Requirements
- Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
- Minimum of 3 years of experience in IT auditing, information security, or a related field.
- Strong understanding of IT general controls (ITGC), cybersecurity principles, and risk management concepts.
- Familiarity with audit frameworks such as COBIT, ISO 27001, and NIST.
- Experience with data analysis tools and techniques is a plus.
- Excellent analytical, problem-solving, and documentation skills.
- Strong communication and interpersonal skills, with the ability to interact professionally with stakeholders at all levels.
- Relevant certifications such as CISA, CRISC, or CISSP are highly desirable.
Benefits
- Our client offers a competitive salary, a comprehensive benefits package including medical aid and a provident fund, and opportunities for professional development.
- The role in Queenstown, Eastern Cape, ZA provides stability within a well-respected organization.
- Employees benefit from ongoing training and exposure to diverse IT environments.
- This position offers a clear career path within the internal audit function.