Information Security Auditor

Placements24; Sandton; On-site; ZAR 350,000 - 550,000; Full time

Benefits offered by this job

Competitive salary

Career progression opportunities

Professional development support

Health and retirement benefits

Job summary

Placements24 is seeking a meticulous Information Security Auditor to join our client's Sandton team. The role focuses on auditing information security controls, assessing policy compliance, and guiding remediation efforts to strengthen risk management.

The ideal candidate has 2–4 years in IT auditing or information security, with knowledge of frameworks like ISO 27001 and COBIT, and relevant certifications such as CISA, CRISC, or CISSP are advantageous.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, or a related field.
• 2-4 years of experience in IT auditing, information security, or risk management.
• Solid understanding of IT audit methodologies and security frameworks (e.g., ISO 27001, COBIT).
• Relevant certifications such as CISA, CRISC, or CISSP are advantageous.

Responsibilities

• Plan and execute information security audits across various systems and departments.
• Assess compliance with established security policies, procedures, and regulatory requirements (e.g., GDPR, POPIA).
• Identify security risks and control deficiencies, documenting findings clearly and concisely.
• Develop actionable recommendations for remediation and present audit reports to management.
• Collaborate with IT and security teams to track the implementation of corrective actions.
• Stay updated on relevant security standards, best practices, and regulatory changes.

Skills

IT auditing

Information security

Risk management

Analytical thinking

Education

Bachelor's degree in Information Systems

Tools

COBIT

ISO 27001

Job description

About the Role

Our client is seeking a meticulous Information Security Auditor to join their team in the heart of Sandton . This role is essential for ensuring the organization adheres to internal policies and external regulatory requirements concerning information security. You will conduct comprehensive audits, identify compliance gaps, and recommend improvements to strengthen security controls. This is a great opportunity for an auditor with a strong understanding of IT security principles to contribute to maintaining the integrity and security of the company's information assets.

Key Responsibilities

• Plan and execute information security audits across various systems and departments.
• Assess compliance with established security policies, procedures, and regulatory requirements (e.g., GDPR, POPIA).
• Identify security risks and control deficiencies, documenting findings clearly and concisely.
• Develop actionable recommendations for remediation and present audit reports to management.
• Collaborate with IT and security teams to track the implementation of corrective actions.
• Stay updated on relevant security standards, best practices, and regulatory changes.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• 2-4 years of experience in IT auditing, information security, or risk management.
• Solid understanding of IT audit methodologies and security frameworks (e.g., ISO 27001, COBIT).
• Knowledge of network security, data privacy, and access controls.
• Strong analytical and problem-solving skills, with excellent attention to detail.
• Relevant certifications such as CISA, CRISC, or CISSP are advantageous.

Benefits

• Competitive salary commensurate with experience and qualifications.
• Full-time role with career progression opportunities in Sandton .
• Comprehensive health and retirement benefits.
• Support for professional development and certifications.
• A professional and collaborative working environment.