Information Security Auditor

Placements24; Soweto; Hybrid; ZAR 520,000 - 760,000; Full time

Benefits offered by this job

Hybrid work

Professional development

Medical benefits

Retirement benefits

Paid time off

Job summary

Placements24 is seeking an experienced Information Security Auditor to join the compliance and assurance team in Soweto. You will evaluate security controls, assess risk, and ensure regulatory adherence to protect sensitive data.

The role offers hybrid work arrangements in Gauteng and a strategic impact on security posture within a large retail organization. Strong audit methodology and certifications are highly valued.

Qualifications

• Bachelor's degree in IT/CS/Accounting or related field.
• 4+ years in information security auditing or related roles.
• Solid knowledge of audit frameworks (COSO, ISACA) and standards (PCI DSS, POPIA).
• Strong analytical, investigative, and communication skills.

Responsibilities

• Plan and execute information security audits across systems, networks, and applications.
• Assess design and operational effectiveness of internal security controls.
• Evaluate compliance with security standards and regulations.
• Document findings and provide remediation recommendations.
• Conduct follow-up audits to verify issue closure.
• Collaborate with IT and business stakeholders to provide security guidance.

Skills

Audit methodologies

Risk assessment

Information security

COSO familiarity

ISACA standards

CISA

CISSP

CRISC

CGEIT

Education

Bachelor's degree in Information Technology/CS/Accounting

Tools

ITGC

PCI DSS

POPIA

Job description

About the Role

Our client, a major player in the retail sector, is seeking an experienced Information Security Auditor to join their compliance and assurance team in Soweto . This role is critical in evaluating the effectiveness of security controls, ensuring compliance with industry standards and regulations, and identifying areas for improvement. The ideal candidate will possess a strong understanding of audit methodologies, risk assessment, and various information security domains. You will play a key part in maintaining the integrity and confidentiality of sensitive company and customer data. This position is based in the economically vibrant region of Gauteng , offering a significant opportunity to impact the security posture of a large organization. We are dedicated to maintaining robust security practices and ensuring regulatory adherence.

Key Responsibilities

• Plan and execute information security audits across various systems, networks, and applications.
• Assess the design and operational effectiveness of internal security controls.
• Evaluate compliance with relevant security standards and regulations (e.g., ISO 27001, PCI DSS, POPIA).
• Identify security risks and control weaknesses, and document findings in detailed audit reports.
• Develop practical recommendations for remediation and track their implementation.
• Conduct follow-up audits to verify that identified issues have been adequately addressed.
• Stay current with evolving security threats, vulnerabilities, and audit techniques.
• Collaborate with IT and business stakeholders to understand processes and provide security guidance.
• Assist in the development and maintenance of audit programs and methodologies.
• Participate in risk assessments and provide assurance on the control environment.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Minimum of 4 years of experience in information security auditing, risk assessment, or a related role.
• Strong knowledge of information security principles, technologies, and best practices.
• Familiarity with audit frameworks and methodologies (e.g., COSO, ISACA).
• Understanding of key regulations and standards relevant to the retail industry (e.g., PCI DSS, POPIA).
• Excellent analytical, investigative, and problem-solving skills.
• Strong written and verbal communication skills, with the ability to present findings clearly.
• Relevant certifications such as CISA, CISSP, CRISC, or CGEIT are highly desirable.
• Ability to work independently, manage multiple audit engagements, and meet deadlines.
• Experience with IT General Controls (ITGC) is a plus.

Benefits

• Our client offers a competitive salary, comprehensive medical and retirement benefits, and generous paid time off.
• They provide opportunities for ongoing professional development, including training and support for relevant certifications.
• Our client fosters a collaborative and supportive work environment, with hybrid work arrangements to promote work-life balance.
• Join our team in Soweto and contribute to the security and compliance of a leading retail organization within the dynamic Gauteng region.
• This is an excellent role for an auditor looking to specialize in information security.