Information Security Auditor - Compliance Focus

Placements24; Southampton; Hybrid; GBP 27,000 - 41,000; Full time

Job summary

Placements24, in partnership with a prominent professional services firm, seeks an experienced Information Security Auditor for a hybrid role in Randburg, ZA. You will conduct thorough security audits, assess compliance with ISO 27001, PCI DSS, GDPR, and internal policies, and document findings with clarity.

You will develop remediation recommendations, collaborate with IT and business units, perform risk assessments, and help shape security policies.

Qualifications

• Bachelor's degree in IT, CS, Auditing, or related field.
• 4+ years in information security auditing or compliance.
• Strong knowledge of COBIT, ITIL, ISO 27001, NIST.
• Experience with risk assessment methodologies and vulnerability management.
• Excellent report writing, analytical, and problem-solving skills.
• Strong communication across staff levels.
• Certifications such as CISA, CRISC, CISSP, CGEIT are desirable.
• Ability to work in office and remote environments in Randburg, ZA.

Responsibilities

• Plan and execute information security audits across various business units and systems.
• Assess compliance with internal policies, industry standards (ISO 27001, PCI DSS, GDPR), and regulatory requirements.
• Identify security control weaknesses and compliance deviations, documenting findings thoroughly.
• Develop detailed audit reports, including recommendations for remediation and process improvements.
• Collaborate with IT and business stakeholders to track the implementation of audit recommendations.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Stay updated on changes in regulations, standards, and security best practices relevant to auditing.
• Participate in the development and review of security policies and procedures.

Skills

Auditing

Compliance

Risk assessment

Security logs analysis

Communication

Education

Bachelor's degree in Information Technology, Computer Science, Auditing, or related field

Tools

COBIT

ITIL

NIST

Job description

About the Role

Our client, a prominent firm within the professional services sector, is seeking an experienced Information Security Auditor to join their dedicated compliance team in Randburg, Gauteng, ZA. This role is integral to ensuring our client adheres to relevant industry regulations and international standards. You will conduct thorough security audits, identify compliance gaps, and recommend remediation strategies to maintain the highest levels of data integrity and security. This hybrid position offers a balance of in-office collaboration and remote flexibility. The ideal candidate possesses a keen eye for detail, a strong understanding of audit methodologies, and a solid grasp of information security principles. Your work will directly contribute to upholding our client's reputation and ensuring the secure handling of sensitive client information in Randburg, Gauteng, ZA.

Key Responsibilities

• Plan and execute information security audits across various business units and systems.
• Assess compliance with internal policies, industry standards (e.g., ISO 27001, PCI DSS, GDPR), and regulatory requirements.
• Identify security control weaknesses and compliance deviations, documenting findings thoroughly.
• Develop detailed audit reports, including recommendations for remediation and process improvements.
• Collaborate with IT and business stakeholders to track the implementation of audit recommendations.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Stay updated on changes in regulations, standards, and security best practices relevant to auditing.
• Participate in the development and review of security policies and procedures.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Auditing, or a related field.
• Minimum of 4 years of experience in information security auditing or compliance roles.
• Solid understanding of audit frameworks (e.g., COBIT, ITIL) and security standards (e.g., ISO 27001, NIST).
• Experience with risk assessment methodologies and vulnerability management.
• Proficiency in analyzing security logs and system configurations.
• Excellent report writing, analytical, and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to interact effectively with all levels of staff.
• Relevant certifications such as CISA, CRISC, CISSP, or CGEIT are highly desirable.
• Ability to work effectively in both office and remote environments within Randburg, Gauteng, ZA.

Benefits

• Our client provides a competitive salary, excellent health and wellness benefits, opportunities for professional certification and training, and a structured career development path.

Join a respected team that values integrity and security, contributing to our client's success in Randburg, Gauteng, ZA.