Information Security Auditor

Placements24; Durban; Hybrid; ZAR 700,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Health insurance

Retirement savings plan

Hybrid work arrangement

Job summary

Placements24 is seeking an Information Security Auditor to join our assurance team in Durban. You will audit IT controls, assess POPIA compliance, and report findings to strengthen risk management. Hybrid work supports balance, with opportunities for growth and specialized certifications.

Ideal candidates have 3–5 years of information security auditing experience and relevant ISACA/COSO knowledge. A collaborative, professional environment awaits in Durban.

Qualifications

• Bachelor's degree in Information Technology, Accounting, Auditing, or a related field.
• 3–5 years in information security auditing, IT risk management, or compliance.
• Strong knowledge of IT audit methodologies and frameworks (ISACA, COSO).
• Professional certifications such as CISA, CRISC or CIA preferred.

Responsibilities

• Plan and execute information security audits across business units and systems.
• Evaluate design and operating effectiveness of IT controls (access, data protection, incident response).
• Assess compliance with regulatory requirements such as POPIA and industry standards.
• Document audit findings, identify deficiencies, and prepare audit reports.
• Develop remediation plans and follow up on corrective actions.
• Liaise with external auditors and regulators as required.

Education

CISA

CRISC

CIA

Tools

IT Audit Tools

Job description

About the Role

Our client seeks a meticulous and detail-oriented Information Security Auditor to join their assurance team in Durban. This role is crucial for evaluating the effectiveness of the organization's security controls and ensuring compliance with internal policies and external regulations. You will conduct audits, identify gaps, and provide actionable recommendations to enhance the security posture. This is an excellent opportunity for a skilled auditor to make a significant impact on the organization's risk management framework within a supportive and professional environment.

Key Responsibilities

• Plan and execute information security audits across various business units and systems.
• Evaluate the design and operational effectiveness of IT controls, including access management, data protection, and incident response.
• Assess compliance with regulatory requirements such as POPIA and industry standards.
• Document audit findings, identify control deficiencies, and prepare comprehensive audit reports.
• Develop remediation plans and follow up on the implementation of corrective actions.
• Liaise with external auditors and regulatory bodies as required.

Requirements

• Bachelor's degree in Information Technology, Accounting, Auditing, or a related field.
• 3-5 years of experience in information security auditing, IT risk management, or compliance.
• Strong knowledge of IT audit methodologies, frameworks (e.g., ISACA, COSO), and control objectives.
• Experience with security tools and technologies relevant to audit assessments.
• Professional certifications such as CISA, CRISC, or CIA are highly preferred.

Benefits

• Competitive salary and annual bonus.
• Comprehensive health insurance and retirement savings plan.
• Opportunities for professional growth and obtaining further certifications.
• A collaborative and respectful workplace culture in Durban.
• Hybrid work arrangement for a balanced work-life integration.