Information Security Auditor

Placements24; Welkom; Hybrid; ZAR 650,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Structured work environment

Job summary

Placements24 in Welkom seeks an Information Security Auditor to assess and improve the organisation's security controls, policies and procedures. You will plan and execute audits, identify gaps, and prepare detailed reports with actionable recommendations for management.

The role requires strong knowledge of audit methodologies, IT risk assessment, and reporting skills, with a preference for a CISA or equivalent certification.

Qualifications

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• Certified Information Systems Auditor (CISA) or equivalent certification strongly preferred.
• Minimum of 4 years of experience in information security, IT audit, or compliance roles.
• Solid understanding of IT control frameworks (e.g., COBIT, SOX) and risk assessment methodologies.
• Experience with data analysis tools and techniques for audit purposes.
• Strong report writing and presentation skills.

Responsibilities

• Plan and execute information security audits according to established audit programs and methodologies.
• Assess the design and operating effectiveness of internal controls over information systems and data.
• Identify control deficiencies, non-compliance issues, and areas for improvement in security practices.
• Prepare detailed audit reports, document findings, and provide actionable recommendations to management.
• Follow up on audit recommendations to ensure timely and effective remediation.
• Stay updated on relevant regulations, standards, and best practices in information security and auditing.

Skills

Audit methodologies

Information security

Data analysis

Report writing

Presentation skills

Education

Bachelor's degree in Accounting, Information Systems, Computer Science, or related

Tools

COBIT

SOX

Data analysis tools

Job description

Our client is seeking a meticulous Information Security Auditor to join their team in Welkom . This role is responsible for evaluating the effectiveness of the organisation's information security controls, policies, and procedures. You will conduct audits, identify compliance gaps, and provide recommendations to enhance the security posture and ensure adherence to regulatory requirements. The ideal candidate possesses a strong understanding of audit methodologies and a sharp analytical mind, crucial for maintaining the integrity and security of company data and systems.

Key Responsibilities

• Plan and execute information security audits according to established audit programs and methodologies.
• Assess the design and operating effectiveness of internal controls over information systems and data.
• Identify control deficiencies, non-compliance issues, and areas for improvement in security practices.
• Prepare detailed audit reports, document findings, and provide actionable recommendations to management.
• Follow up on audit recommendations to ensure timely and effective remediation.
• Stay updated on relevant regulations, standards, and best practices in information security and auditing.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• Certified Information Systems Auditor (CISA) or equivalent certification strongly preferred.
• Minimum of 4 years of experience in information security, IT audit, or compliance roles.
• Solid understanding of IT control frameworks (e.g., COBIT, SOX) and risk assessment methodologies.
• Experience with data analysis tools and techniques for audit purposes.
• Strong report writing and presentation skills.

Benefits

• Competitive salary and comprehensive benefits package.
• Opportunities for professional development and continuing education in Welkom .
• Exposure to diverse aspects of information security and risk management.
• A structured and professional work environment.
• Contribution to the overall security and compliance of the organisation.