Information Security Auditor

Placements24; Randfontein; Hybrid; ZAR 480,000 - 720,000; Full time

Benefits offered by this job

Competitive salary with annual bonuses

Comprehensive health insurance

Professional development and cert. 지원

Hybrid work arrangement

Work-life balance initiatives

Exposure to diverse IT systems

Job summary

Placements24 is seeking a meticulous Information Security Auditor to join our client in Rustenburg. You will plan and execute audits of information systems, assess controls, and report findings to management to strengthen security posture.

You will evaluate compliance with POPIA, GDPR, PCI DSS and internal policies, perform risk assessments, and collaborate with IT, legal and business teams to implement remediation. A strong audit background and relevant certifications are highly valued.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• 3–5 years of information security auditing, risk assessment, or IT compliance experience.
• Strong knowledge of audit principles, frameworks (COBIT, ITIL) and standards (ISO 27001, NIST).
• Understanding of IT general and application controls.
• Experience with data privacy regulations and their security impact.
• Excellent report writing and communication skills.
• Professional certifications such as CISA, CISSP, or CISM are advantageous.
• Ability to manage multiple audits independently.
• Familiarity with Rustenburg region is helpful but not required.

Responsibilities

• Plan and conduct comprehensive information security audits across various business units and systems.
• Assess the effectiveness of existing security controls and identify gaps.
• Evaluate compliance with relevant regulations (e.g., POPIA, GDPR, PCI DSS) and internal policies.
• Perform risk assessments related to information security and data privacy.
• Document audit findings, develop detailed reports, and present recommendations to management.
• Follow up on audit recommendations to ensure timely and effective implementation.
• Stay updated on audit best practices, emerging threats, and regulatory changes.
• Collaborate with IT, legal, and business teams to ensure a coordinated approach to security and compliance.
• Assist in the development and improvement of audit methodologies and tools.
• Participate in risk management activities and provide assurance on control effectiveness.

Skills

Auditing

COBIT

ISO 27001

NIST

CISA

CISSP

CISM

POPIA/GDPR familiarity

Education

Bachelor's degree in Information Systems or related field

Job description

About the Role

Our client is seeking a meticulous and detail-oriented Information Security Auditor to join their esteemed team based in Rustenburg, North West. This role is critical for ensuring that our client's information systems and data adhere to established security policies, industry standards, and regulatory requirements. You will be responsible for planning, executing, and reporting on information security audits, identifying potential risks and control weaknesses, and recommending effective remediation strategies. The ideal candidate possesses a strong understanding of audit methodologies and a passion for maintaining the integrity and security of information systems. This position offers a chance to contribute to a secure operational environment in the heart of Rustenburg, North West.

Key Responsibilities

• Plan and conduct comprehensive information security audits across various business units and systems.
• Assess the effectiveness of existing security controls and identify gaps.
• Evaluate compliance with relevant regulations (e.g., POPIA, GDPR, PCI DSS) and internal policies.
• Perform risk assessments related to information security and data privacy.
• Document audit findings, develop detailed reports, and present recommendations to management.
• Follow up on audit recommendations to ensure timely and effective implementation.
• Stay updated on audit best practices, emerging threats, and regulatory changes.
• Collaborate with IT, legal, and business teams to ensure a coordinated approach to security and compliance.
• Assist in the development and improvement of audit methodologies and tools.
• Participate in risk management activities and provide assurance on control effectiveness.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 3-5 years of experience in information security auditing, risk assessment, or IT compliance.
• Strong knowledge of audit principles, frameworks (e.g., COBIT, ITIL), and standards (e.g., ISO 27001, NIST).
• Understanding of IT general controls and application controls.
• Experience with data privacy regulations and their impact on security.
• Excellent written and verbal communication skills, with the ability to produce clear and concise audit reports.
• Strong analytical, critical thinking, and problem-solving skills.
• Professional certifications such as CISA, CISSP, or CISM are highly advantageous.
• Ability to work independently and manage multiple audit projects simultaneously.
• Familiarity with the operational landscape of Rustenburg, North West can be beneficial but is not mandatory.

Benefits

• Competitive salary and potential for annual bonuses.
• Comprehensive health insurance package.
• Opportunities for professional development and certification support.
• A dynamic and supportive work environment.
• Work-life balance initiatives.
• Exposure to diverse IT systems and security practices within the client's organization.
• Hybrid work arrangement for enhanced flexibility.