Information Security Auditor - IT Compliance

Placements24; Queenstown; On-site; NZD 64,000 - 96,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Professional development

Job summary

Placements24 is seeking an experienced Information Security Auditor to join the internal audit function in Queenstown (ZA). This full-time role requires in-office presence to interact with IT teams and management.

You will evaluate IT controls, ensure policy compliance, and contribute to safeguarding information assets and systems. The role emphasizes auditing across ITGC, data, and access controls, with responsibility for audit reports, findings, and remediation follow-up.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 3 years of experience in IT auditing, information security, or a related field.
• Strong understanding of IT general controls (ITGC), cybersecurity principles, and risk management concepts.
• Familiarity with audit frameworks such as COBIT, ISO 27001, and NIST.
• Experience with data analysis tools and techniques is a plus.
• Excellent analytical, problem-solving, and documentation skills.
• Strong communication and interpersonal skills, with the ability to interact professionally with stakeholders at all levels.
• Relevant certifications such as CISA, CRISC, or CISSP are highly desirable.

Responsibilities

• Plan and execute information security audits across various IT systems and applications.
• Assess the design and operational effectiveness of IT controls, including access controls, data security, and network security.
• Identify control weaknesses, security risks, and non-compliance issues.
• Develop detailed audit reports with findings, recommendations, and management action plans.
• Follow up on audit recommendations to ensure timely and effective remediation.
• Stay updated on IT audit best practices, emerging threats, and regulatory requirements.
• Collaborate with IT management and staff to facilitate audit processes and communicate findings.
• Participate in risk assessments and contribute to the development of the annual audit plan.

Skills

IT auditing

Information security

Risk management

COBIT

ISO 27001

NIST

CISA

CRISC

CISSP

Education

Bachelor's degree

Tools

Data analysis tools

Job description

About the Role

Our client, a leading retail conglomerate, is seeking an experienced Information Security Auditor to join their internal audit department. This role is based in Queenstown, Eastern Cape, ZA , and requires a full-time commitment in the office to facilitate direct interaction with IT teams and management. You will be responsible for evaluating the effectiveness of the organization's IT controls and ensuring compliance with security policies, standards, and relevant regulations. This position is vital in maintaining the integrity and security of the company's information assets and systems.

Key Responsibilities

• Plan and execute information security audits across various IT systems and applications.
• Assess the design and operational effectiveness of IT controls, including access controls, data security, and network security.
• Identify control weaknesses, security risks, and non-compliance issues.
• Develop detailed audit reports with findings, recommendations, and management action plans.
• Follow up on audit recommendations to ensure timely and effective remediation.
• Stay updated on IT audit best practices, emerging threats, and regulatory requirements.
• Collaborate with IT management and staff to facilitate audit processes and communicate findings.
• Participate in risk assessments and contribute to the development of the annual audit plan.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 3 years of experience in IT auditing, information security, or a related field.
• Strong understanding of IT general controls (ITGC), cybersecurity principles, and risk management concepts.
• Familiarity with audit frameworks such as COBIT, ISO 27001, and NIST.
• Experience with data analysis tools and techniques is a plus.
• Excellent analytical, problem-solving, and documentation skills.
• Strong communication and interpersonal skills, with the ability to interact professionally with stakeholders at all levels.
• Relevant certifications such as CISA, CRISC, or CISSP are highly desirable.

Benefits

Our client offers a competitive salary, a comprehensive benefits package including medical aid and a provident fund, and opportunities for professional development. The role in Queenstown, Eastern Cape, ZA provides stability within a well-respected organization. Employees benefit from ongoing training and exposure to diverse IT environments. This position offers a clear career path within the internal audit function.