Information Security Auditor - CISA Certified

Placements24; Noord-Kaap; On-site; ZAR 540,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Performance bonus

Certifications support

Job summary

Placements24 is seeking an experienced Information Security Auditor for their Kimberley, Northern Cape office. The role focuses on assessing information security controls, conducting audits per ISACA/ISO 27001 standards, and reporting findings to improve client IT risk posture.

The ideal candidate has a strong IT/audit background, knowledge of POPIA, COBIT, and NIST, and preferably holds a CISA certification.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
• Minimum of 3 years of experience in information security, IT audit, or risk management.
• Proven experience conducting IT and cybersecurity audits.
• Strong understanding of IT control frameworks (e.g., COBIT, NIST) and security standards (e.g., ISO 27001).
• Knowledge of data privacy regulations and compliance requirements.
• Excellent analytical, critical thinking, and problem-solving skills.
• Strong report writing and communication skills.
• Ability to manage multiple audit engagements simultaneously.
• CISA (Certified Information Systems Auditor) certification is highly preferred; other relevant certifications (e.g., CRISC, CISSP) are a plus.

Responsibilities

• Plan and execute information security audits according to established audit methodologies and standards (e.g., ISACA, ISO 27001).
• Assess the design and operating effectiveness of IT general controls, application controls, and cybersecurity controls.
• Evaluate compliance with data privacy regulations (e.g., POPIA) and other relevant legal and regulatory requirements.
• Identify control weaknesses, risks, and opportunities for improvement, documenting findings clearly and concisely.
• Prepare detailed audit reports, including management letters, outlining audit findings, risk assessments, and actionable recommendations.
• Communicate audit progress, findings, and recommendations to clients and internal management.
• Follow up on the implementation status of audit recommendations.
• Stay updated on emerging cybersecurity threats, IT risks, and relevant regulatory changes.
• Participate in risk assessments and provide input on the overall IT risk landscape.

Skills

Analytical skills

Critical thinking

Problem-solving

Report writing

Communication

Audit management

CISA certification preferred

Education

Bachelor's degree in Information Systems/Computer Science/Accounting or related field

Tools

COBIT

NIST

ISO 27001

Job description

About the Role

Our client, a reputable advisory and assurance services firm, is seeking a diligent and experienced Information Security Auditor, preferably CISA certified, to join their growing practice in Kimberley, Northern Cape. This role is vital for assessing and evaluating the effectiveness of information security controls, systems, and processes across a diverse range of clients. The Information Security Auditor will conduct audits to ensure compliance with relevant regulations, industry standards, and internal policies, providing assurance and recommendations for improvement. This position requires strong analytical skills, a thorough understanding of IT controls, and the ability to work independently and as part of an audit team, based at our Kimberley office.

Key Responsibilities

• Plan and execute information security audits according to established audit methodologies and standards (e.g., ISACA, ISO 27001).
• Assess the design and operating effectiveness of IT general controls, application controls, and cybersecurity controls.
• Evaluate compliance with data privacy regulations (e.g., POPIA) and other relevant legal and regulatory requirements.
• Identify control weaknesses, risks, and opportunities for improvement, documenting findings clearly and concisely.
• Prepare detailed audit reports, including management letters, outlining audit findings, risk assessments, and actionable recommendations.
• Communicate audit progress, findings, and recommendations to clients and internal management.
• Follow up on the implementation status of audit recommendations.
• Stay updated on emerging cybersecurity threats, IT risks, and relevant regulatory changes.
• Participate in risk assessments and provide input on the overall IT risk landscape.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 3 years of experience in information security, IT audit, or risk management.
• Proven experience conducting IT and cybersecurity audits.
• Strong understanding of IT control frameworks (e.g., COBIT, NIST) and security standards (e.g., ISO 27001).
• Knowledge of data privacy regulations and compliance requirements.
• Excellent analytical, critical thinking, and problem-solving skills.
• Strong report writing and communication skills.
• Ability to manage multiple audit engagements simultaneously.
• CISA (Certified Information Systems Auditor) certification is highly preferred; other relevant certifications (e.g., CRISC, CISSP) are a plus.

Benefits

Our client offers a competitive salary, comprehensive medical aid, a performance bonus, and excellent opportunities for professional growth, including support for certifications and continuing professional education. The role is based in Kimberley, Northern Cape, within a professional and collaborative work environment. Employees benefit from exposure to a variety of clients and industries, continuous learning opportunities, and the chance to develop expertise in information security assurance.