Information Security Auditor - Compliance Focus

Placements24; Pretoria; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Medical & dental insurance

Retirement fund

Generous leave

Professional development

Hybrid work

Diverse industries exposure

Prestigious firm in Pretoria

Bonuses

Job summary

Placements24 is seeking an experienced Information Security Auditor to join our Pretoria-based advisory firm. You will plan, execute, and report on security audits, assess risks, and recommend improvements to security controls.

The role blends in-office collaboration with remote work to support diverse client engagements. The ideal candidate has 4+ years of information security auditing experience, strong knowledge of frameworks, and professional certifications.

Qualifications

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• Minimum of 4 years of experience in information security auditing, risk management, or IT compliance.
• In-depth knowledge of common information security frameworks and standards (ISO 27001, NIST CSF, PCI DSS, SOX, GDPR, POPIA).
• Experience with risk assessment methodologies and control testing.
• Strong understanding of IT general controls and application controls.
• Excellent analytical, documentation, and report-writing skills.
• Proficiency in using audit management software is a plus.
• Relevant certifications such as CISA, CISSP, CRISC, or CISM are highly desirable.
• Strong communication and interpersonal skills, with the ability to build rapport with clients and internal teams.
• Ability to manage multiple audit engagements simultaneously.

Responsibilities

• Plan and conduct information security audits and assessments based on established frameworks (e.g., ISO 27001, NIST, PCI DSS, POPIA).
• Evaluate the design and effectiveness of internal controls related to information security.
• Identify security risks and vulnerabilities, assessing their potential impact on the organization.
• Prepare comprehensive audit reports detailing findings, recommendations, and action plans.
• Follow up on audit recommendations to ensure timely and effective implementation.
• Collaborate with IT, legal, and business units to understand processes and controls.
• Stay current with evolving security threats, vulnerabilities, and regulatory requirements.
• Assist in the development and refinement of audit methodologies and tools.
• Communicate audit results clearly and effectively to management and stakeholders.
• Provide guidance and training on compliance requirements and best practices.
• Review third-party vendor security practices.

Skills

Information security auditing

Risk assessment

Regulatory compliance

Education

Bachelor's degree in Information Systems / Computer Science

Tools

Audit management software

Job description

About the Role

Our client, a reputable advisory firm, is seeking an experienced Information Security Auditor to join their growing team in Pretoria, Gauteng . This role is crucial for ensuring that our client's and its clients' information security practices meet industry standards and regulatory requirements. You will be responsible for planning, executing, and reporting on security audits, assessing risks, and recommending improvements to security controls. The position requires a meticulous approach, strong understanding of various compliance frameworks, and excellent analytical skills. This is an excellent opportunity for a security professional passionate about compliance and risk management to make a significant impact within a dynamic environment. The hybrid work model allows for a blend of in-office collaboration and remote work, providing flexibility while ensuring effective team coordination. You will engage with diverse clients across various sectors, providing valuable insights into their security posture and compliance adherence, contributing to their overall business resilience.

Key Responsibilities

• Plan and conduct information security audits and assessments based on established frameworks (e.g., ISO 27001, NIST, PCI DSS, POPIA).
• Evaluate the design and effectiveness of internal controls related to information security.
• Identify security risks and vulnerabilities, assessing their potential impact on the organization.
• Prepare comprehensive audit reports detailing findings, recommendations, and action plans.
• Follow up on audit recommendations to ensure timely and effective implementation.
• Collaborate with IT, legal, and business units to understand processes and controls.
• Stay current with evolving security threats, vulnerabilities, and regulatory requirements.
• Assist in the development and refinement of audit methodologies and tools.
• Communicate audit results clearly and effectively to management and stakeholders.
• Provide guidance and training on compliance requirements and best practices.
• Review third-party vendor security practices.

Requirements

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• Minimum of 4 years of experience in information security auditing, risk management, or IT compliance.
• In-depth knowledge of common information security frameworks and standards (ISO 27001, NIST CSF, PCI DSS, SOX, GDPR, POPIA).
• Experience with risk assessment methodologies and control testing.
• Strong understanding of IT general controls and application controls.
• Excellent analytical, documentation, and report-writing skills.
• Proficiency in using audit management software is a plus.
• Relevant certifications such as CISA, CISSP, CRISC, or CISM are highly desirable.
• Strong communication and interpersonal skills, with the ability to build rapport with clients and internal teams.
• Ability to manage multiple audit engagements simultaneously.

Benefits

• Competitive annual salary.
• Comprehensive medical and dental insurance.
• Retirement fund participation.
• Generous annual leave and paid time off.
• Support for professional development, including certifications and training.
• Hybrid work arrangement for flexibility.
• Exposure to diverse industries and challenging audit projects.
• Opportunity to work with a respected firm in Pretoria .
• Performance-based bonuses.