Information Security Auditor

Placements24; Gqeberha; Hybrid; ZAR 520,000 - 820,000; Full time

Benefits offered by this job

Hybrid work environment

Professional certifications support

Health and retirement benefits

Performance incentives

Job summary

Placements24 is seeking an Information Security Auditor to ensure compliance, assess risks, and enhance security controls across IT systems and business processes. The role involves planning and executing audits, evaluating control effectiveness, and reporting findings to management.

Candidates should have at least 4 years in IT audit or information security, with knowledge of COBIT, ISO 27001, or NIST, and proficiency in audit management and data analysis tools.

Qualifications

• Bachelor's degree in Information Systems, Accounting, Computer Science, or related field.
• Minimum of 4 years of IT auditing, information security, or risk management experience.
• Familiarity with COBIT, ISO 27001, or NIST security frameworks.
• Experience with risk assessment techniques and control evaluation.
• Proficient in audit management software and data analysis tools.

Responsibilities

• Plan and execute information security audits and assessments across IT systems and business processes.
• Evaluate the design and operating effectiveness of internal controls related to information security.
• Verify compliance with relevant industry standards, regulatory requirements, and internal policies.
• Identify control weaknesses and security vulnerabilities, documenting findings and proposing corrective actions.
• Prepare comprehensive audit reports for management and stakeholders, including actionable recommendations.
• Follow up on audit findings to ensure timely and effective remediation.

Skills

IT auditing

Information security

Risk management

Audit methodologies

Data analysis

Education

Bachelor's degree in Information Systems, Accounting, Computer Science, or related field

Tools

Audit management software

Data analysis tools

Job description

About the Role

Our client is seeking a meticulous Information Security Auditor to ensure compliance and identify potential security risks within their systems and processes in Port Elizabeth . This role involves evaluating the effectiveness of existing security controls, verifying adherence to internal policies and external regulations, and recommending improvements to enhance the overall security posture. You will work closely with various departments to conduct audits, assess risks, and report on findings, playing a key part in maintaining the integrity and trustworthiness of the organization's information assets. This is an excellent opportunity for a detail-oriented professional to contribute to robust governance and security assurance.

Key Responsibilities

• Plan and execute information security audits and assessments across IT systems and business processes.
• Evaluate the design and operating effectiveness of internal controls related to information security.
• Verify compliance with relevant industry standards, regulatory requirements, and internal policies.
• Identify control weaknesses and security vulnerabilities, documenting findings and proposing corrective actions.
• Prepare comprehensive audit reports for management and stakeholders, including actionable recommendations.
• Follow up on audit findings to ensure timely and effective remediation.

Requirements

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• Minimum of 4 years of experience in IT auditing , information security, or risk management.
• Strong understanding of auditing principles and methodologies for IT environments.
• Knowledge of security frameworks such as COBIT, ISO 27001, or NIST.
• Experience with risk assessment techniques and control evaluation.
• Proficiency in using audit management software and data analysis tools.

Benefits

• Competitive annual salary and performance incentives.
• Comprehensive health and retirement benefits.
• Support for professional certifications such as CISA or CRISC.
• Hybrid work environment offering flexibility.
• Engage in critical assessments that safeguard company assets.