Information Security Auditor - Compliance Specialist

Placements24; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive remuneration

Health and life insurance

Professional development

Collaborative team environment

Retirement savings plan

Exposure to diverse IT systems

Flexible working arrangements

Job summary

Placements24 is seeking an experienced Information Security Auditor to join our client’s compliance team in the United States. The role focuses on assessing the effectiveness of information security controls and ensuring regulatory alignment.

You will perform audits across IT systems, identify control gaps, and collaborate with IT and business units to drive remediation while keeping abreast of standards such as COBIT, ISO 27001, and GDPR.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 4 years of information security auditing or compliance experience.
• Knowledge of COBIT, ITIL, ISO 27001, and NIST.
• Familiarity with POPIA and GDPR.
• Professional certifications such as CISA, CISSP, or CRISC are preferred.

Responsibilities

• Plan, execute, and document information security audits across IT systems and processes.
• Assess design and operation of controls against policies and standards.
• Evaluate compliance with POPIA, GDPR, PCI DSS, and related regulations.
• Identify risks, document findings, and recommend remediation actions.
• Develop audit reports and present findings to management.
• Coordinate with IT and business units to verify corrective actions.
• Stay current on threats and regulatory changes.
• Support external audits and regulatory inquiries.

Skills

Audit methodologies

Risk management

Data privacy

IT audit frameworks

CISA/CISSP/CRISC

Compliance knowledge

Education

Bachelor's degree in Information Systems, CS, or related

Tools

Audit management software

Job description

About the Role

Our client is actively seeking a meticulous and experienced Information Security Auditor to join their dedicated compliance team in Tembisa, Gauteng, ZA . This crucial role involves assessing and verifying the effectiveness of our client's information security controls and ensuring adherence to relevant regulatory requirements and industry standards. You will play a key part in identifying compliance gaps, recommending corrective actions, and driving improvements in the overall security posture. The ideal candidate possesses a strong understanding of audit methodologies, risk management, and various compliance frameworks. This is an excellent opportunity to contribute to maintaining a high level of security assurance within a reputable organization.

Key Responsibilities

• Plan, execute, and document information security audits across various IT systems and business processes.
• Assess the design and operational effectiveness of security controls against established policies, procedures, and standards.
• Evaluate compliance with regulations such as POPIA, GDPR, PCI DSS, and others as applicable.
• Identify security risks and control deficiencies, documenting findings and providing actionable recommendations for remediation.
• Develop audit reports, presenting findings and recommendations to management and relevant stakeholders.
• Collaborate with IT, security, and business units to track the implementation of corrective actions.
• Stay current with evolving security threats, vulnerabilities, and regulatory landscapes.
• Participate in the development and refinement of audit methodologies and tools.
• Conduct follow-up audits to ensure the adequacy of implemented controls.
• Assist in responding to external audit requests and regulatory inquiries.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 4 years of experience in information security auditing, risk assessment, or compliance.
• In-depth knowledge of IT audit frameworks (e.g., COBIT, ITIL) and security standards (e.g., ISO 27001, NIST).
• Familiarity with data privacy regulations like POPIA and GDPR.
• Experience with various types of audits, including operational, compliance, and system audits.
• Strong analytical, critical thinking, and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to document findings clearly and concisely.
• Relevant certifications such as CISA, CISSP, CRISC are highly preferred.
• Ability to work independently and manage multiple audit projects simultaneously.
• Proficiency in using audit management software and tools.

Benefits

• Competitive remuneration package.
• Comprehensive health and life insurance benefits.
• Opportunities for professional development and specialized training.
• A collaborative team environment located in Tembisa, Gauteng, ZA .
• Retirement savings plan.
• Exposure to diverse business units and IT systems.
• Flexible working arrangements.