Information Security Auditor

Placements24; The Islands (MS); Hybrid; USD 85,000 - 110,000; Full time

Job summary

Placements24 is seeking a detail-oriented Information Security Auditor to join its compliance and risk management team, working remotely. You will evaluate the effectiveness of security controls and ensure adherence to internal policies and external regulations.

Responsibilities include planning and executing audits, identifying control gaps, documenting findings, and providing remediation recommendations while collaborating with IT and business stakeholders.

Qualifications

• Bachelor’s degree and 3–5 years IT auditing or security experience.
• Knowledge of COBIT, ISO 27001, and NIST.
• Certifications such as CISA/CISSP/CRISC preferred.

Responsibilities

• Plan and execute information security audits across systems and units.
• Evaluate IT controls design and operating effectiveness.
• Conduct risk assessments to identify vulnerabilities and control deficiencies.
• Document audit findings and provide remediation recommendations.
• Collaborate with IT and business stakeholders to verify remediation.
• Stay updated on relevant laws and industry standards.

Skills

IT auditing

Risk assessment

Report writing

Presentation skills

Regulatory knowledge

Education

Bachelor's degree in Accounting, Information Systems, Computer Science, or related field

Tools

COBIT

ISO 27001

NIST

Job description

About the Role

Our client is seeking a detail-oriented Information Security Auditor to join their compliance and risk management team, working remotely. This role is essential for evaluating the effectiveness of existing security controls and ensuring adherence to internal policies and external regulations. You will conduct comprehensive audits, identify control gaps, and provide actionable recommendations to improve the organization's security posture. Your work will directly contribute to maintaining trust and compliance in a rapidly evolving digital landscape.

Key Responsibilities

• Plan and execute information security audits across various systems and business units.
• Evaluate the design and operating effectiveness of IT controls against industry best practices and regulatory requirements.
• Perform risk assessments to identify and prioritize security vulnerabilities and control deficiencies.
• Document audit findings clearly and concisely, providing constructive recommendations for remediation.
• Collaborate with IT and business stakeholders to track and verify the implementation of audit recommendations.
• Stay current with relevant laws, regulations, and industry standards related to information security and data privacy.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• 3-5 years of experience in IT auditing, information security, or risk management.
• Strong understanding of IT control frameworks (e.g., COBIT, ISO 27001, NIST).
• Familiarity with audit methodologies and risk assessment techniques.
• Excellent report writing and presentation skills.
• Professional certifications such as CISA, CISSP, or CRISC are highly preferred.

Benefits

• Competitive salary and remote work flexibility.
• Comprehensive health and retirement benefits.
• Support for obtaining and maintaining professional certifications.
• Opportunities for career advancement within the audit and risk management functions.
• A culture that values integrity, accuracy, and continuous improvement, allowing you to work from anywhere.