Information Security Auditor

Placements24; Midrand; On-site; ZAR 480,000 - 760,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Annual leave

Professional development

Career progression

Job summary

Placements24 in Midrand, Gauteng is seeking a detail-oriented Information Security Auditor to join our established team. The role focuses on evaluating IT controls, risk management, and compliance with regulatory frameworks, and involves on-site auditing activities.

You will plan and execute audits, assess regulatory compliance (POPIA, ISO 27001, NIST), document findings, and collaborate with IT and business units to remediate issues. Strong writing and communication skills are essential.

Qualifications

• 3+ years in IT audit, information security, or risk management.
• Knowledge of COBIT, ISO 27001, and NIST.
• Data privacy regulations (POPIA).
• Experience with risk assessment methodologies and vulnerability tools.
• Strong analytical and detail orientation.
• Excellent report writing and documentation; stakeholder interaction.
• Professional certifications such as CISA, CRISC, or CISSP desirable.
• Ability to manage multiple audit engagements.

Responsibilities

• Plan and execute IT audits to evaluate internal controls and security processes.
• Assess compliance with regulations and internal policies.
• Identify security risks and vulnerabilities through audits, reviews and testing.
• Document audit findings, recommendations, and remediation plans clearly.
• Collaborate with IT and business units to remediate issues.
• Perform security assessments of third-party vendors and service providers.
• Stay up-to-date with evolving cybersecurity threats, risks and regulations.
• Prepare detailed audit reports for management and stakeholders.
• Develop and refine audit procedures and methodologies.
• Participate in security awareness training initiatives.

Skills

IT audit

Risk assessment

Compliance

Analytical thinking

Communication skills

Documentation

Team collaboration

Attention to detail

Education

Bachelor's degree in IT / Accounting / Auditing

Tools

COBIT

ISO 27001

NIST

POPIA

Vulnerability assessment tools

Job description

About the Role

Our client is looking for a detail-oriented Information Security Auditor to join their established team in Midrand, Gauteng . This role requires a strong understanding of IT controls, risk management, and compliance frameworks. You will be responsible for assessing the effectiveness of our client's security measures, identifying compliance gaps, and recommending improvements to ensure adherence to internal policies and external regulations. This is an on-site position, providing a structured work environment for in-depth auditing activities.

Key Responsibilities

• Plan and execute IT audits to evaluate the effectiveness of internal controls and security processes.


• Assess compliance with relevant regulations, industry standards (e.g., POPIA, GDPR, SOX), and internal policies.


• Identify security risks and vulnerabilities through audits, reviews, and testing.


• Document audit findings, recommendations, and remediation plans clearly and concisely.


• Collaborate with IT and business units to develop and track remediation efforts for identified issues.


• Perform security assessments of third-party vendors and service providers.


• Stay up-to-date with evolving cybersecurity threats, risks, and regulatory requirements.


• Prepare detailed audit reports for management and relevant stakeholders.


• Develop and refine audit procedures and methodologies.


• Participate in security awareness training initiatives.

Requirements

• Bachelor's degree in Information Technology, Accounting, Auditing, or a related field.


• Minimum of 3 years of experience in IT audit, information security, or risk management.


• Solid understanding of IT control frameworks such as COBIT, ISO 27001, and NIST.


• Knowledge of data privacy regulations (e.g., POPIA).


• Experience with risk assessment methodologies and vulnerability assessment tools.


• Strong analytical and problem-solving skills with excellent attention to detail.


• Proficiency in report writing and documentation.


• Excellent communication and interpersonal skills to effectively interact with stakeholders at various levels.


• Professional certifications such as CISA, CRISC, or CISSP are highly desirable.


• Ability to work effectively within a team and manage multiple audit engagements.

Benefits

• Competitive annual salary and potential for performance-based incentives.


• Comprehensive medical aid and provident fund.


• Annual leave and other statutory benefits.


• Opportunities for professional development and certifications.


• Exposure to diverse IT systems and business processes.


• Stable work environment in Midrand, Gauteng .


• Supportive team culture and mentorship opportunities.


• Defined career progression path within the audit function.