Information Security Auditor – Growth & Certifications (Sandton)

Placements24; Sandton; On-site; ZAR 350,000 - 550,000; Full time

Benefits offered by this job

Competitive salary

Career progression opportunities

Professional development support

Health and retirement benefits

Job summary

Placements24 is seeking a meticulous Information Security Auditor to join our client's Sandton team. The role focuses on auditing information security controls, assessing policy compliance, and guiding remediation efforts to strengthen risk management.

The ideal candidate has 2–4 years in IT auditing or information security, with knowledge of frameworks like ISO 27001 and COBIT, and relevant certifications such as CISA, CRISC, or CISSP are advantageous.

Qualifications

• Bachelor's degree in information systems, computer science, accounting, or a related field.
• 2-4 years of experience in IT auditing, information security, or risk management.
• Solid understanding of IT audit methodologies and security frameworks (e.g., ISO 27001, COBIT).
• Relevant certifications such as CISA, CRISC, or CISSP are advantageous.

Responsibilities

• Plan and execute information security audits across various systems and departments.
• Assess compliance with established security policies, procedures, and regulatory requirements (e.g., GDPR, POPIA).
• Identify security risks and control deficiencies, documenting findings clearly and concisely.
• Develop actionable recommendations for remediation and present audit reports to management.
• Collaborate with IT and security teams to track the implementation of corrective actions.
• Stay updated on relevant security standards, best practices, and regulatory changes.

Skills

IT auditing

Information security

Risk management

Analytical thinking

Education

Bachelor's degree in Information Systems

Tools

COBIT

ISO 27001

Job description

Placements24 is seeking a meticulous Information Security Auditor to join our client's Sandton team. The role focuses on auditing information security controls, assessing policy compliance, and guiding remediation efforts to strengthen risk management.

The ideal candidate has 2–4 years in IT auditing or information security, with knowledge of frameworks like ISO 27001 and COBIT, and relevant certifications such as CISA, CRISC, or CISSP are advantageous.