Information Security Auditor

Placements24; Upington; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary & incentives

Health, dental, vision insurance

Generous paid time off & retirement

Professional development opportunities

Structured career progression

Job summary

Placements24 is seeking an experienced Information Security Auditor to join the compliance and assurance team in Upington. The role focuses on evaluating security controls, ensuring regulatory compliance, and guiding remediation actions to mitigate risks.

The ideal candidate has 5+ years in IT auditing or information security, with knowledge of IT governance frameworks and strong reporting skills. Certifications such as CISA, CISSP, or CRISC are highly regarded.

Qualifications

• Bachelor's degree in Information Security, Accounting, Computer Science, or related field.
• Minimum of 5 years of IT auditing or information security experience.
• Strong knowledge of auditing methodologies and governance frameworks (COBIT, ISO 27001).
• Experience with security controls for infrastructure, applications, and data protection.
• Excellent analytical, written and verbal communication skills.
• Professional certifications such as CISA, CISSP, or CRISC preferred.

Responsibilities

• Plan and conduct independent information security audits to assess compliance with policies and regulations.
• Evaluate design and operating effectiveness of IT controls related to data security, access management, and network security.
• Identify security vulnerabilities and control deficiencies, documenting findings clearly and concisely.
• Develop detailed audit reports with actionable recommendations for management.
• Track the remediation of identified issues and verify the effectiveness of corrective actions.
• Stay updated on relevant industry standards, regulatory requirements, and emerging security risks.

Skills

Auditing methodologies

IT governance frameworks

Data protection

Security controls

Analytical skills

Written and verbal communication

CISA/CISSP/CRISC certifications

Education

Bachelor's degree in Information Security, Accounting, Computer Science, or related field

Tools

COBIT

ISO 27001

Job description

About the Role

Our client is seeking a meticulous and experienced Information Security Auditor to join their compliance and assurance team in Upington . This role is responsible for evaluating the effectiveness of the organization's security controls, ensuring compliance with internal policies, and adhering to external regulatory requirements. You will conduct regular audits, identify control weaknesses, and recommend remediation actions to mitigate risks. The ideal candidate possesses a strong understanding of IT governance, risk management, and cybersecurity principles, with a keen eye for detail and excellent reporting skills. This position is critical in maintaining the integrity and security of the company's information systems.

Key Responsibilities

• Plan and conduct independent information security audits to assess compliance with policies and regulations.
• Evaluate the design and operating effectiveness of IT controls related to data security, access management, and network security.
• Identify security vulnerabilities and control deficiencies, documenting findings clearly and concisely.
• Develop detailed audit reports with actionable recommendations for management.
• Track the remediation of identified issues and verify the effectiveness of corrective actions.
• Stay updated on relevant industry standards, regulatory requirements, and emerging security risks.

Requirements

• Bachelor's degree in Information Security, Accounting, Computer Science, or a related field.
• Minimum of 5 years of experience in IT auditing, information security, or risk management.
• Strong knowledge of auditing methodologies, IT governance frameworks (e.g., COBIT, ISO 27001), and compliance requirements.
• Experience with security controls related to infrastructure, applications, and data protection.
• Excellent analytical, problem-solving, and written and verbal communication skills.
• Professional certifications such as CISA, CISSP, or CRISC are highly desirable.

Benefits

• Competitive annual salary and performance-based incentives.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and retirement savings plan.
• Opportunities for professional development and further certifications.
• A structured work environment with clear career progression paths.