Information Security Auditor - Compliance Focus

Placements24; Kempton Park; On-site; ZAR 450,000 - 850,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Professional development opportunities

Job summary

Client Financial Services Institution in Gauteng seeks an Information Security Auditor to ensure compliance with ISO 27001, POPIA, GDPR and internal policies. The role focuses on risk assessment, control effectiveness, and remediation tracking, collaborating with IT and external auditors.

The ideal candidate has 3–5 years in security auditing, strong analytical skills, and relevant certifications. Based in Tembisa vicinity with opportunities to advance within audit and risk functions.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Accounting, or related field.
• 3–5 years in information security auditing, risk management, or IT compliance.
• Knowledge of ISO 27001, SOX, NIST, POPIA, GDPR.
• Experience with audit management software.
• CISA, CISSP, or CRISC certifications desirable.
• Familiarity with IT general controls (ITGC).

Responsibilities

• Plan and execute information security audits per standards (e.g., ISO 27001, POPIA, PCI DSS).
• Assess design and operating effectiveness of information security controls across IT systems and processes.
• Identify compliance gaps, control weaknesses, and risks.
• Document audit findings and track remediation progress.
• Collaborate with IT, business units, and external auditors to facilitate audits.
• Stay updated on evolving regulatory requirements and best practices.
• Develop and update audit programs and methodologies.
• Prepare comprehensive audit reports for management and stakeholders.

Skills

Information security auditing

Risk management

Regulatory compliance

Education

Bachelor's degree in Information Technology/Computer Science/Accounting

Tools

Audit management software

Job description

About the Role

Our client, a significant financial services institution operating in Tembisa, Gauteng , is looking for a dedicated Information Security Auditor . This critical role involves ensuring that the organization's information systems and processes adhere to stringent regulatory requirements and internal security policies. The ideal candidate will possess a keen eye for detail, a solid understanding of compliance frameworks, and a passion for maintaining a robust security posture. You will be a key player in assessing risks, identifying control deficiencies, and recommending remediation actions to uphold the integrity and confidentiality of sensitive data. This position offers a unique opportunity to shape and influence the compliance landscape within a prominent South African enterprise.

Key Responsibilities

• Plan and execute information security audits in accordance with relevant standards (e.g., ISO 27001, POPIA, PCI DSS).
• Assess the design and operating effectiveness of information security controls across various IT systems and business processes.
• Identify compliance gaps, control weaknesses, and areas of potential risk.
• Document audit findings, develop clear and concise recommendations, and track remediation progress.
• Collaborate with IT, business units, and external auditors to facilitate audit processes and ensure alignment.
• Stay abreast of evolving regulatory requirements and industry best practices in information security and compliance.
• Develop and update audit programs and methodologies to reflect changes in technology and business objectives.
• Prepare comprehensive audit reports for management and relevant stakeholders.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Proven experience (3-5 years) in information security auditing, risk management, or IT compliance roles.
• In-depth knowledge of major information security frameworks and regulations such as ISO 27001, SOX, NIST, POPIA, and GDPR.
• Experience with audit management software and tools.
• Strong analytical, investigative, and report-writing skills.
• Excellent communication and interpersonal skills to effectively interact with diverse teams.
• Professional certifications such as CISA, CISSP, or CRISC are highly desirable.
• Familiarity with IT general controls (ITGC) and application controls.

Benefits

This role offers a competitive annual salary and comprehensive benefits package, including medical aid and a provident fund. Employees will benefit from ongoing professional development opportunities, including support for relevant certifications and training programs. Our client is committed to fostering a secure and compliant work environment. The position is based in Tembisa, Gauteng , offering a stable and rewarding career path within a respected organization. Opportunities for advancement within the internal audit and risk management functions are available.