Information Security Auditor - Compliance Focus

Placements24; Randburg; Hybrid; ZAR 520,000 - 760,000; Full time

Benefits offered by this job

Health and wellness benefits

Professional certification and培训

Structured career development path

Job summary

Placements24 in Randburg, Gauteng, ZA, is seeking an experienced Information Security Auditor to join its compliance team. The role blends in-office collaboration with remote work and focuses on auditing security controls, identifying gaps, and recommending remediation to protect client data.

You will assess compliance with internal policies and standards such as ISO 27001, PCI DSS, and GDPR, perform risk assessments, and prepare detailed audit reports for stakeholders across all levels.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Auditing, or a related field.
• Minimum of 4 years of experience in information security auditing or compliance roles.
• Solid understanding of COBIT, ITIL, and security standards (ISO 27001, NIST).
• Experience with risk assessment methodologies and vulnerability management.
• Certifications such as CISA, CRISC, CISSP, or CGEIT are highly desirable.

Responsibilities

• Plan and execute information security audits across business units and systems.
• Assess compliance with internal policies, industry standards (ISO 27001, PCI DSS, GDPR), and regulations.
• Identify weaknesses and deviations; document findings thoroughly.
• Develop audit reports with remediation recommendations and process improvements.
• Collaborate with IT and business stakeholders to track remediation progress.
• Conduct risk assessments to identify threats and vulnerabilities.
• Stay updated on regulations, standards, and security best practices.
• Participate in development and review of security policies and procedures.

Skills

Report writing

Analytical thinking

Problem solving

Strong communication

Interpersonal skills

Audit methodologies

Education

Bachelor's degree in Information Technology, Computer Science, Auditing, or related field

Job description

About the Role Our client, a prominent firm within the professional services sector, is seeking an experienced Information Security Auditor to join their dedicated compliance team in **Randburg, Gauteng, ZA**. This role is integral to ensuring our client adheres to relevant industry regulations and international standards. You will conduct thorough security audits, identify compliance gaps, and recommend remediation strategies to maintain the highest levels of data integrity and security. This hybrid position offers a balance of in-office collaboration and remote flexibility. The ideal candidate possesses a keen eye for detail, a strong understanding of audit methodologies, and a solid grasp of information security principles. Your work will directly contribute to upholding our client's reputation and ensuring the secure handling of sensitive client information in **Randburg, Gauteng, ZA**.

Key Responsibilities

• Plan and execute information security audits across various business units and systems.
• Assess compliance with internal policies, industry standards (e.g., ISO 27001, PCI DSS, GDPR), and regulatory requirements.
• Identify security control weaknesses and compliance deviations, documenting findings thoroughly.
• Develop detailed audit reports, including recommendations for remediation and process improvements.
• Collaborate with IT and business stakeholders to track the implementation of audit recommendations.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Stay updated on changes in regulations, standards, and security best practices relevant to auditing.
• Participate in the development and review of security policies and procedures.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Auditing, or a related field.
• Minimum of 4 years of experience in information security auditing or compliance roles.
• Solid understanding of audit frameworks (e.g., COBIT, ITIL) and security standards (e.g., ISO 27001, NIST).
• Experience with risk assessment methodologies and vulnerability management.
• Proficiency in analyzing security logs and system configurations.
• Excellent report writing, analytical, and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to interact effectively with all levels of staff.
• Relevant certifications such as CISA, CRISC, CISSP, or CGEIT are highly desirable.
• Ability to work effectively in both office and remote environments within **Randburg, Gauteng, ZA**.

Benefits

• Our client provides a competitive salary, excellent health and wellness benefits, opportunities for professional certification and training, and a structured career development path. Join a respected team that values integrity and security, contributing to our client's success in **Randburg, Gauteng, ZA**.