Information Security Auditor

Placements24; Roanoke (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote work

Medical aid

Retirement annuity

Certifications support

Bonuses

Employee assistance program

Job summary

Placements24 is hiring an Information Security Auditor for a fully remote role with a leading financial services client. The role focuses on planning and executing security audits, assessing IT general and application controls, and ensuring regulatory compliance.

The ideal candidate has 4+ years in information security auditing, strong knowledge of COBIT/ISO 27001/NIST, and relevant certifications (CISA, CRISC, CISSP, CIA preferred). Remote collaboration with cross-functional teams is essential.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Computer Science, or related field.
• Minimum of 4 years of information security auditing, IT auditing, or information security risk management.
• Strong understanding of IT audit principles, risk assessment methodologies, and control frameworks (e.g., COBIT, ISO 27001, NIST).
• Experience auditing security controls across networks, systems, applications, cloud environments, and data protection.
• Knowledge of financial services regulations and compliance is desirable.
• Excellent analytical, critical thinking, and problem-solving skills.
• Proficient in audit documentation and reporting.
• Strong communication and interpersonal skills with stakeholders at all levels.
• Professional certifications such as CISA, CRISC, CISSP, or CIA are strongly preferred.
• Experience with data analytics tools for audit purposes is a plus.

Responsibilities

• Plan and conduct independent audits of information security controls across systems and units.
• Assess design and operating effectiveness of IT general controls and application controls.
• Evaluate compliance with information security policies, standards, and regulations (e.g., POPIA, Basel).
• Identify and document control deficiencies with risk impact.
• Develop clear audit reports with actionable remediation recommendations.
• Follow up on audit findings to ensure timely resolution by management.
• Stay current with evolving cybersecurity threats, regulatory changes, and best practices.
• Collaborate with IT, risk management, and business stakeholders during audits.
• Perform ad-hoc security reviews and investigations as requested.
• Contribute to continuous improvement of the internal audit security program.

Skills

IT audit principles

Risk assessment

Analytical thinking

Communication

Education

Bachelor's degree

Tools

COBIT

ISO 27001

NIST

Job description

About the Role

Our client, a leading financial services group, is seeking a meticulous Information Security Auditor to join their internal audit team. This fully remote role is crucial for assessing the effectiveness of the organization's security controls and ensuring compliance with regulatory requirements and internal policies. The ideal candidate will possess a strong understanding of information security principles, audit methodologies, and risk management. You will be responsible for planning and executing security audits, identifying control weaknesses, and recommending improvements. This is an excellent opportunity for an experienced auditor to contribute to the security assurance of a major financial institution from a remote setting.

Key Responsibilities

• Plan and conduct independent audits of information security controls across various systems and business units.
• Assess the design and operating effectiveness of IT general controls and application controls.
• Evaluate compliance with information security policies, standards, and relevant regulations (e.g., POPIA, Basel).
• Identify and document control deficiencies, assessing their risks and impact.
• Develop clear and concise audit reports with actionable recommendations for remediation.
• Follow up on audit findings to ensure timely and effective resolution by management.
• Stay current with evolving cybersecurity threats, regulatory changes, and audit best practices.
• Collaborate with IT, risk management, and business stakeholders during audit engagements.
• Perform ad-hoc security reviews and investigations as requested.
• Contribute to the continuous improvement of the internal audit function's security audit program.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• Minimum of 4 years of experience in information security auditing, IT auditing, or information security risk management.
• Strong understanding of IT audit principles, risk assessment methodologies, and control frameworks (e.g., COBIT, ISO 27001, NIST).
• Experience in auditing security controls related to networks, systems, applications, cloud environments, and data protection.
• Knowledge of financial services industry regulations and compliance requirements is highly desirable.
• Excellent analytical, critical thinking, and problem-solving skills.
• Proficiency in audit documentation and reporting.
• Strong communication and interpersonal skills, with the ability to interact effectively with all levels of the organization.
• Professional certifications such as CISA, CRISC, CISSP, or CIA are strongly preferred.
• Experience with data analytics tools for audit purposes is a plus.

Benefits

• Our client offers a competitive salary commensurate with experience and a comprehensive benefits package.
• As this is a fully remote position, it provides exceptional work flexibility.
• Benefits include medical aid, a retirement annuity, and opportunities for professional development, including support for certifications and ongoing training.
• Our client is committed to fostering a secure and compliant environment and values the expertise of its remote employees.
• Performance bonuses and an employee assistance program are also provided.