Information Security Auditor

Placements24; Mtubatuba Local Municipality; Hybrid; ZAR 500,000 - 800,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work arrangement

Health benefits

Growth opportunities

Collaborative environment

Job summary

Placements24 is seeking a meticulous Information Security Auditor to join its compliance team in Richards Bay. The role focuses on planning and executing IT audits, assessing controls, and ensuring compliance with policies and regulatory requirements.

You will document findings, report to management, and follow up on remediation. A 3+ year track record in IT auditing is expected, with certifications like CISA/CISSP/CISM preferred. Hybrid work offers office and remote flexibility.

Qualifications

• Bachelor's degree in Information Technology
• 3+ years IT auditing, information security, or risk management
• Knowledge of IT control frameworks and risk assessment methodologies
• Familiarity with operating systems, network technologies, and common security controls
• Excellent written and verbal communication skills
• Relevant certifications such as CISA, CISSP, or CISM are a plus

Responsibilities

• Plan and execute information security audits, assessing IT controls and security measures.
• Evaluate compliance with internal policies, industry standards (ISO 27001, SOX), and regulatory mandates.
• Identify vulnerabilities and control deficiencies, documenting findings and recommending remediation actions.
• Prepare detailed audit reports for management, clearly communicating risks and proposed solutions.
• Follow up on audit recommendations to ensure timely and effective implementation of corrective actions.
• Stay current with audit methodologies, regulatory changes, and emerging security risks.

Skills

IT auditing

Information security

Risk assessment

Audit reporting

Communication skills

Education

Bachelor's degree in Information Technology

Job description

About the Role

Our client is seeking a meticulous and detail-oriented Information Security Auditor to join their compliance team in Richards Bay . This role is essential for ensuring that the organization's IT systems and security controls meet established policies, standards, and regulatory requirements. You will be responsible for planning and executing audits, identifying control weaknesses, and recommending corrective actions to mitigate risks. This position offers a valuable opportunity to work across various departments, contributing to the overall integrity and security posture of the company.

Key Responsibilities

• Plan and execute information security audits, assessing the effectiveness of IT controls and security measures.
• Evaluate compliance with internal policies, industry standards (e.g., ISO 27001, SOX), and regulatory mandates.
• Identify vulnerabilities and control deficiencies, documenting findings and recommending remediation actions.
• Prepare detailed audit reports for management, clearly communicating risks and proposed solutions.
• Follow up on audit recommendations to ensure timely and effective implementation of corrective actions.
• Stay current with audit methodologies, regulatory changes, and emerging security risks.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• 3+ years of experience in IT auditing, information security, or risk management.
• Strong understanding of IT control frameworks, audit principles, and risk assessment methodologies.
• Familiarity with various operating systems, network technologies, and common security controls.
• Excellent written and verbal communication skills, with the ability to present findings clearly.
• Relevant certifications such as CISA, CISSP, or CISM are a plus.

Benefits

• Competitive salary with performance-based incentives.
• Hybrid work arrangement providing a balance between office and remote flexibility.
• Comprehensive health benefits package.
• Opportunities for professional growth and development in audit and security.
• A collaborative environment focused on maintaining high standards of governance and security.