Information Security Auditor - Compliance Focus

Placements24; Durban; Hybrid; ZAR 480,000 - 800,000; Full time

Benefits offered by this job

Remote work from Durban area

Medical aid

Retirement contributions

Flexible working hours

Leave entitlement

Job summary

Placements24 invites an experienced Information Security Auditor to join the Durban compliance team. The role focuses on planning, executing, and reporting audits across IT systems, ensuring adherence to POPIA and other regulatory standards.

Strong skills in risk assessment, IT controls and audit reporting are essential for success. The ideal candidate will have 4+ years in security auditing within financial services or related sectors, with certifications such as CISA or CISSP being highly

Qualifications

• Bachelor’s degree required in IT, Auditing, CS or related field.
• Minimum 4 years of information security auditing, IT risk, or compliance experience.
• Strong knowledge of information security principles, IT controls, and risk assessment methodologies.
• Familiarity with ISO 27001, NIST, COBIT and SA regulatory requirements.
• Experience in IT audits from planning to reporting; strong report-writing skills.
• Professional certifications such as CISA, CRISC, or CISSP are desirable.

Responsibilities

• Plan and conduct comprehensive information security audits and assessments.
• Evaluate the design and operating effectiveness of IT controls related to security and compliance.
• Assess adherence to relevant regulations (POPIA, GDPR where applicable).
• Identify security risks, vulnerabilities and compliance gaps through audits.
• Document findings, recommendations and action plans clearly.
• Communicate results to management and stakeholders; follow up on remediation.

Skills

Information security auditing

Risk assessment methodologies

IT controls

Audit reporting

Regulatory compliance

Communication skills

Education

Bachelor's degree in Information Technology / Auditing / Computer Science

Tools

ISO 27001

NIST

COBIT

Job description

About the Role

Our client, a growing financial services institution, is looking for a meticulous and detail-oriented Information Security Auditor to join their compliance team in Durban, KwaZulu-Natal . This role is crucial for ensuring that the organization adheres to various regulatory requirements and internal security policies. You will be responsible for planning, executing, and reporting on information security audits across different business units and IT systems. The ideal candidate will have a strong understanding of compliance frameworks, risk assessment methodologies, and audit procedures within the financial sector. This is a fantastic opportunity to make a significant impact on the security and compliance posture of a reputable organization while enjoying a flexible work arrangement.

Key Responsibilities

• Plan and conduct comprehensive information security audits and assessments.
• Evaluate the design and operating effectiveness of IT controls related to security and compliance.
• Assess adherence to relevant industry regulations (e.g., POPIA, GDPR if applicable, industry-specific mandates).
• Identify security risks, vulnerabilities, and compliance gaps through audit procedures.
• Document audit findings, recommendations, and action plans clearly and concisely.
• Communicate audit results and recommendations to management and relevant stakeholders.
• Follow up on audit findings to ensure remediation actions are implemented effectively and timely.
• Develop and update audit programs and checklists based on evolving risks and regulations.
• Collaborate with internal and external auditors, as well as regulatory bodies.
• Stay informed about emerging security threats, vulnerabilities, and regulatory changes affecting the financial industry.

Requirements

• Bachelor's degree in Information Technology, Auditing, Computer Science, or a related field.
• Minimum of 4 years of experience in information security auditing, IT risk management, or compliance roles.
• Strong knowledge of information security principles, IT controls, and risk assessment methodologies.
• Familiarity with common compliance frameworks such as ISO 27001, NIST, COBIT, and relevant South African regulations.
• Experience in conducting IT audits, including planning, fieldwork, and reporting.
• Excellent analytical, problem-solving, and organizational skills.
• Strong written and verbal communication skills, with the ability to produce clear and accurate audit reports.
• Ability to work independently and manage multiple audit projects simultaneously.
• Professional certifications such as CISA, CRISC, or CISSP are highly desirable.
• Experience within the financial services sector is a significant advantage.

Benefits

• Competitive salary package tailored to experience.
• Excellent benefits including medical aid and retirement contributions.
• Opportunities for professional development and further certifications.
• Work remotely from anywhere in Durban, KwaZulu-Natal or surrounding areas.
• Be part of a dedicated team focused on maintaining high security standards.
• Flexible working hours to promote work-life balance.
• Exposure to diverse audit engagements and challenges.
• Supportive management and collaborative team environment.
• Generous annual leave entitlement.
• Access to ongoing training and industry workshops.