Information Security Auditor - Compliance Specialist

Placements24; Centurion; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Salary and performance bonuses

Medical aid

Life insurance

Provident fund

Professional development

Job summary

Placements24 is seeking an Information Security Auditor to join its compliance team in Centurion, Gauteng. The role focuses on planning and conducting security audits, assessing risks, and ensuring adherence to POPIA, GDPR, and ISO 27001.

You will develop audit reports, work with IT and business units, and stay current with regulatory changes. A 3-year experience and relevant certifications strongly preferred.

Qualifications

• Bachelor's degree in Information Systems, Accounting, Auditing, or related field.
• Professional certifications such as CISA, CRISC, or CISSP are highly preferred.
• Minimum of 3 years of experience in information security auditing or compliance.
• In-depth knowledge of audit principles, techniques, and frameworks (e.g., COBIT, ITIL).
• Strong understanding of data privacy regulations (POPIA, GDPR) and information security standards (ISO 27001).
• Experience with risk assessment methodologies and control evaluation.
• Excellent report writing, analytical, and problem-solving skills.

Responsibilities

• Plan and conduct comprehensive information security audits across various business units and systems.
• Assess compliance with relevant regulations such as POPIA, GDPR, and industry-specific standards.
• Evaluate the effectiveness of existing security controls and identify control deficiencies.
• Develop detailed audit reports, documenting findings, risks, and recommendations for remediation.
• Work closely with IT and business stakeholders to ensure timely implementation of audit recommendations.
• Perform risk assessments and identify potential security vulnerabilities and threats.
• Stay current with evolving regulatory landscapes and security best practices.
• Develop and maintain audit plans and work programs.
• Participate in external audits and respond to auditor inquiries.
• Provide guidance on compliance matters and security best practices to internal teams.

Skills

Audit methodologies

Regulatory compliance

Data privacy knowledge

Report writing

Stakeholder engagement

Analytical thinking

Education

Bachelor's degree in Information Systems, Accounting, Auditing, or related field

Job description

About the Role

Our client is looking for a meticulous and detail-oriented Information Security Auditor to join their compliance team in Centurion, Gauteng . This role is pivotal in ensuring that our client's information security practices adhere to regulatory requirements and internal policies. You will be responsible for planning and executing security audits, assessing risks, and recommending improvements to strengthen the overall security posture. The ideal candidate will have a strong understanding of audit methodologies, risk management frameworks, and relevant compliance standards. This is a fantastic opportunity to contribute to the integrity and security of sensitive data within a leading organization.

Key Responsibilities

• Plan and conduct comprehensive information security audits across various business units and systems.
• Assess compliance with relevant regulations such as POPIA, GDPR, and industry-specific standards.
• Evaluate the effectiveness of existing security controls and identify control deficiencies.
• Develop detailed audit reports, documenting findings, risks, and recommendations for remediation.
• Work closely with IT and business stakeholders to ensure timely implementation of audit recommendations.
• Perform risk assessments and identify potential security vulnerabilities and threats.
• Stay current with evolving regulatory landscapes and security best practices.
• Develop and maintain audit plans and work programs.
• Participate in external audits and respond to auditor inquiries.
• Provide guidance on compliance matters and security best practices to internal teams.

Requirements

• Bachelor's degree in Information Systems, Accounting, Auditing, or a related field.
• Professional certifications such as CISA, CRISC, or CISSP are highly preferred.
• Minimum of 3 years of experience in information security auditing or compliance.
• In-depth knowledge of audit principles, techniques, and frameworks (e.g., COBIT, ITIL).
• Strong understanding of data privacy regulations (POPIA, GDPR) and information security standards (ISO 27001).
• Experience with risk assessment methodologies and control evaluation.
• Excellent report writing, analytical, and problem-solving skills.
• Proficiency in using audit management software and tools.
• Strong interpersonal and communication skills to effectively engage with stakeholders at all levels.
• Ability to manage multiple audit projects simultaneously and meet deadlines.
• A proactive approach to identifying and addressing potential compliance issues.

Benefits

Our client provides a competitive remuneration package, including an attractive annual salary and performance bonuses. A comprehensive benefits plan covers medical aid, life insurance, and a provident fund. Continuous professional development is encouraged, with opportunities for further training and certifications. The role is based at our modern offices in Centurion, Gauteng , offering a stable and professional working environment. We offer a structured career path and the opportunity to work on critical compliance initiatives that shape the company's security framework. A commitment to employee well-being and work-life balance is a core value.