Information Security Auditor - Durban

Placements24; Durban; Híbrido; ZAR 750.000 - 1.100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical aid

Provident fund

Descripción de la vacante

Placements24 in Durban is seeking an experienced Information Security Auditor to assess the effectiveness of IT security controls and ensure regulatory compliance. The role combines remote work with on-site collaboration in Durban, offering a hybrid work model within a large manufacturing group.

The ideal candidate has a Bachelor’s degree in IT/CS, minimum 4 years in IT auditing or information security, strong ITGC and application control experience, knowledge of POPIA and GDPR, and holds or is

Formación

• Bachelor's degree in IT/CS or related field.
• Minimum 4 years in IT auditing or information security.
• Experience with IT general controls (ITGC) and application controls.
• Strong understanding of risk management and audit methodologies.
• Knowledge of POPIA and GDPR.
• CISA preferred.

Responsabilidades

• Plan and execute IT security audits to evaluate the adequacy and effectiveness of internal controls.
• Assess compliance with POPIA, GDPR and ISO 27001.
• Identify and document security vulnerabilities, risks, and control deficiencies.
• Develop audit reports with findings, recommendations and action plans.
• Follow up on audit recommendations to ensure remediation.
• Review IT policies, procedures and guidelines for alignment with security best practices.
• Evaluate security of IT infrastructure including networks, servers, applications and databases.
• Provide guidance to IT teams on security control implementation.
• Stay updated on emerging threats and audit techniques.

Conocimientos

IT audit

Information security

Regulatory compliance

Risk management

Data privacy

Educación

Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field

Herramientas

Audit software

Descripción del empleo

About the Role

Our client, a well-established manufacturing group headquartered in **Durban, KwaZulu-Natal**, is seeking an experienced Information Security Auditor. This critical role will focus on assessing the effectiveness of the company's IT security controls, ensuring compliance with regulatory requirements, and identifying areas for improvement. The ideal candidate will possess a strong understanding of IT systems, security best practices, and audit methodologies. You will play a key role in maintaining the integrity and confidentiality of the organization's data and systems. This position offers a challenging yet rewarding career opportunity within a company committed to robust security practices. The role involves a hybrid work model, combining remote work with on-site collaboration in **Durban**.

Key Responsibilities

• Plan and execute IT security audits to evaluate the adequacy and effectiveness of internal controls.
• Assess compliance with relevant regulations (e.g., POPIA, GDPR) and industry standards (e.g., ISO 27001).
• Identify and document security vulnerabilities, risks, and control deficiencies.
• Develop detailed audit reports with clear findings, recommendations, and action plans for remediation.
• Follow up on audit recommendations to ensure timely and effective implementation by management.
• Perform reviews of IT policies, procedures, and guidelines to ensure they align with security best practices and business objectives.
• Evaluate the security of IT infrastructure, including networks, servers, applications, and databases.
• Provide guidance and support to IT teams on security control implementation and best practices.
• Stay updated on emerging threats, vulnerabilities, and audit techniques.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Minimum of 4 years of experience in IT auditing, information security, or a related compliance role.
• Proven experience in conducting IT general controls (ITGC) audits and application control reviews.
• Solid understanding of IT security principles, risk management frameworks, and audit methodologies.
• Familiarity with data privacy regulations such as POPIA and GDPR.
• Experience with data analysis and audit management software is a plus.
• Strong analytical, critical thinking, and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to present complex information clearly.
• Relevant certifications such as CISA (Certified Information Systems Auditor) are highly preferred.

Benefits

Our client offers a competitive salary, comprehensive benefits package including medical aid and a provident fund, and opportunities for professional growth and development. The hybrid work arrangement provides flexibility, and the role offers significant exposure to various aspects of IT security within a large enterprise in **Durban**.