About the Role
Our client is seeking a diligent and experienced Information Security Auditor, specializing in compliance, to join their robust, remote-first security team. This vital role focuses on evaluating the effectiveness of information security controls and ensuring adherence to relevant regulations, industry standards, and internal policies. You will conduct comprehensive audits, identify control gaps, and recommend remediation strategies to strengthen the organization's security posture. This is an excellent opportunity for a compliance-focused security professional to work remotely and contribute to maintaining high standards of governance and risk management across the business. The position requires a deep understanding of various compliance frameworks and a keen eye for detail, supporting operations that may be in or near Paarl, Western Cape . We are looking for a proactive individual committed to ensuring operational integrity and security assurance.
Key Responsibilities
- Plan and execute information security audits across various systems, applications, and processes.
- Assess compliance with relevant regulations and standards such as GDPR, POPIA, ISO 27001, PCI DSS, and SOX.
- Evaluate the design and operating effectiveness of information security controls.
- Identify control deficiencies, security risks, and areas for improvement.
- Develop detailed audit reports, including findings, risk assessments, and actionable remediation recommendations.
- Work with auditees to develop and implement remediation plans, and track progress.
- Conduct risk assessments to identify and prioritize potential security threats and vulnerabilities.
- Stay current with evolving compliance requirements, security threats, and best practices.
- Provide guidance and support to business units on security and compliance matters.
- Contribute to the continuous improvement of the internal audit program and security governance framework.
Requirements
- Bachelor's degree in Computer Science, Information Systems, Accounting, or a related field.
- Minimum of 4-6 years of experience in information security, IT audit, or compliance roles.
- Proven experience conducting IT and security audits against various frameworks (ISO 27001, NIST, COBIT, etc.).
- Strong understanding of data privacy regulations (e.g., GDPR, POPIA) and their impact on security controls.
- Familiarity with risk assessment methodologies and tools.
- Excellent analytical, critical thinking, and problem-solving skills.
- Strong written and verbal communication skills, with the ability to produce clear and concise audit reports.
- Ability to work independently, manage multiple audit projects simultaneously, and meet deadlines in a remote setting.
- Professional certifications such as CISA, CISSP, CRISC, or CGEIT are highly desirable.
Benefits
- Competitive salary and performance-based bonuses.
- Comprehensive health, dental, and retirement benefits.
- Generous professional development budget and support for certifications.
- Flexible working hours and a supportive remote-first work environment.
- Opportunity to significantly impact the organization's security and compliance posture.
- Engage with a wide range of security and technology challenges remotely.
- Contribute to maintaining trust and integrity across our operational areas, including those near Paarl, Western Cape .