Remote Information Security Auditor - IT Controls

Placements24; Roanoke (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote work

Medical aid

Retirement annuity

Certifications support

Bonuses

Employee assistance program

Job summary

Placements24 is hiring an Information Security Auditor for a fully remote role with a leading financial services client. The role focuses on planning and executing security audits, assessing IT general and application controls, and ensuring regulatory compliance.

The ideal candidate has 4+ years in information security auditing, strong knowledge of COBIT/ISO 27001/NIST, and relevant certifications (CISA, CRISC, CISSP, CIA preferred). Remote collaboration with cross-functional teams is essential.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Computer Science, or related field.
• Minimum of 4 years of information security auditing, IT auditing, or information security risk management.
• Strong understanding of IT audit principles, risk assessment methodologies, and control frameworks (e.g., COBIT, ISO 27001, NIST).
• Experience auditing security controls across networks, systems, applications, cloud environments, and data protection.
• Knowledge of financial services regulations and compliance is desirable.
• Excellent analytical, critical thinking, and problem-solving skills.
• Proficient in audit documentation and reporting.
• Strong communication and interpersonal skills with stakeholders at all levels.
• Professional certifications such as CISA, CRISC, CISSP, or CIA are strongly preferred.
• Experience with data analytics tools for audit purposes is a plus.

Responsibilities

• Plan and conduct independent audits of information security controls across systems and units.
• Assess design and operating effectiveness of IT general controls and application controls.
• Evaluate compliance with information security policies, standards, and regulations (e.g., POPIA, Basel).
• Identify and document control deficiencies with risk impact.
• Develop clear audit reports with actionable remediation recommendations.
• Follow up on audit findings to ensure timely resolution by management.
• Stay current with evolving cybersecurity threats, regulatory changes, and best practices.
• Collaborate with IT, risk management, and business stakeholders during audits.
• Perform ad-hoc security reviews and investigations as requested.
• Contribute to continuous improvement of the internal audit security program.

Skills

IT audit principles

Risk assessment

Analytical thinking

Communication

Education

Bachelor's degree

Tools

COBIT

ISO 27001

NIST

Job description

Placements24 is hiring an Information Security Auditor for a fully remote role with a leading financial services client. The role focuses on planning and executing security audits, assessing IT general and application controls, and ensuring regulatory compliance.

The ideal candidate has 4+ years in information security auditing, strong knowledge of COBIT/ISO 27001/NIST, and relevant certifications (CISA, CRISC, CISSP, CIA preferred). Remote collaboration with cross-functional teams is essential.