Information Security Auditor

Placements24; Stellenbosch; Hybrid; ZAR 600,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary with annual reviews

Health insurance

Retirement savings plan

Professional growth

Hybrid work model

Job summary

Placements24 in Stellenbosch is seeking a detail-oriented Information Security Auditor to assess the effectiveness of the organization's security controls, policies and procedures.

You will plan and conduct internal and external audits, document findings, and provide clear remediation recommendations while maintaining compliance with COBIT, ISO 27001, NIST and SOX. The role offers a hybrid work model and opportunities for professional growth in audit and security.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
• 3-5 years of information security auditing experience.
• Strong knowledge of IT audit frameworks such as COBIT, ISO 27001, NIST, and SOX.
• Certifications such as CISA, CRISC, or CISSP are highly preferred.
• Excellent analytical, documentation, and reporting skills.

Responsibilities

• Plan and execute information security audits, including internal and external audits, assessing compliance and risk.
• Evaluate the design and operational effectiveness of security controls across IT infrastructure, applications, and data.
• Perform detailed testing of security policies, procedures, and system configurations to ensure adherence to standards.
• Document audit findings, including identified risks and control deficiencies, and provide clear, actionable recommendations for remediation.
• Prepare comprehensive audit reports for management and relevant stakeholders, highlighting key risks and compliance status.
• Follow up on audit recommendations to ensure timely and effective implementation of corrective actions.
• Stay informed about emerging security threats, regulatory changes, and audit best practices.

Skills

Information security auditing

Regulatory compliance

Risk assessment

Documentation skills

Analytical thinking

Education

Bachelor's degree in Information Systems, Computer Science, Accounting

Tools

COBIT

ISO 27001

NIST

SOX

CISA

CRISC

CISSP

Job description

About the Role

Our client is looking for a detail-oriented Information Security Auditor to join their team in Stellenbosch . This role is responsible for assessing the effectiveness of the organization's information security controls, policies, and procedures. You will conduct audits to ensure compliance with regulatory requirements, internal standards, and industry best practices, identifying areas of risk and recommending improvements. The successful candidate will possess a strong understanding of audit methodologies and a keen eye for identifying security gaps and ensuring data integrity and protection.

Key Responsibilities

• Plan and execute information security audits, including internal and external audits, assessing compliance and risk.
• Evaluate the design and operational effectiveness of security controls across IT infrastructure, applications, and data.
• Perform detailed testing of security policies, procedures, and system configurations to ensure adherence to standards.
• Document audit findings, including identified risks and control deficiencies, and provide clear, actionable recommendations for remediation.
• Prepare comprehensive audit reports for management and relevant stakeholders, highlighting key risks and compliance status.
• Follow up on audit recommendations to ensure timely and effective implementation of corrective actions.
• Stay informed about emerging security threats, regulatory changes, and audit best practices.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• 3-5 years of experience in information security auditing, risk assessment, or compliance roles.
• Strong knowledge of IT audit frameworks such as COBIT, ISO 27001, NIST, and SOX.
• Familiarity with security control environments and testing methodologies.
• Excellent analytical, documentation, and reporting skills.
• Relevant certifications such as CISA, CRISC, or CISSP are highly preferred.
• Ability to work independently and collaboratively within a team in Stellenbosch .

Benefits

• Competitive salary with potential for annual performance reviews and increments.
• Comprehensive health insurance and retirement savings plan.
• Opportunities for professional growth and development in audit and security.
• A stable and supportive work environment focused on compliance and security.
• Hybrid work model offering flexibility for work-life integration.