Information Security Auditor - Internal Controls

Placements24; Stellenbosch; Hybrid; ZAR 400,000 - 720,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Professional development support

Hybrid work model

Wellness programs

Job summary

Placements24 is seeking an Information Security Auditor to join the compliance and assurance team in Stellenbosch. The role focuses on evaluating IT controls, policy adherence, and regulatory compliance in a hybrid work setting with office collaboration and remote flexibility.

The ideal candidate has 3+ years in IT auditing or risk management, with knowledge of COBIT/ISO 27001/NIST and security controls across access, data, network, and systems. Certifications are preferred.

Qualifications

• Bachelor's degree in information systems, computer science, accounting or related field.
• Minimum of 3 years IT auditing, information security or risk management experience.
• Solid understanding of IT audit methodologies and internal control principles (COBIT, ISO 27001, NIST).
• Experience assessing security controls for access, data, network, and system development.

Responsibilities

• Plan and execute internal information security audits across IT systems and processes.
• Assess design and operating effectiveness of IT general controls and application controls.
• Evaluate compliance with security policies, procedures and regulatory requirements (POPIA, GDPR).
• Identify information security risks, document findings and recommendations.
• Prepare clear audit reports for management and stakeholders.
• Follow up on audit recommendations to ensure remediation.
• Conduct investigations such as fraud or security incidents as required.
• Stay updated on threats, vulnerabilities and audit standards.
• Collaborate with IT, risk management and business units to strengthen controls.
• Support ongoing improvement of internal audit program and methodology.

Skills

IT auditing

Analytical thinking

Communication skills

Risk assessment

Problem solving

Education

Bachelor's degree in Information Systems/Computer Science/Accounting or related

Tools

COBIT

ISO 27001

NIST

Job description

About the Role

Our client, a leading provider of technology solutions for the agricultural sector, is seeking an Information Security Auditor to join their compliance and assurance team. This role is essential for evaluating the effectiveness of the organization's IT controls and ensuring adherence to internal policies, industry standards, and regulatory requirements. You will conduct independent audits of information systems, processes, and controls, identifying risks and recommending improvements. The position is based in our client's innovation hub in Stellenbosch, Western Cape , with a hybrid work arrangement that blends in-office collaboration with remote flexibility. We are looking for a meticulous and analytical professional with a strong understanding of IT audit principles and cybersecurity best practices. This is an excellent opportunity to contribute to the integrity and security of critical business systems in a growth-oriented company.

Key Responsibilities

• Plan and execute internal information security audits across various IT systems and business processes.
• Assess the design and operating effectiveness of IT general controls and application controls.
• Evaluate compliance with established security policies, procedures, and regulatory requirements (e.g., POPIA, GDPR).
• Identify information security risks and weaknesses, documenting findings and recommendations.
• Prepare clear and concise audit reports for management and relevant stakeholders.
• Follow up on audit recommendations to ensure timely and effective remediation.
• Conduct special investigations as required, such as fraud or security incident analysis.
• Stay updated on emerging threats, vulnerabilities, and relevant audit and security standards.
• Collaborate with IT, risk management, and business units to foster a strong control environment.
• Contribute to the continuous improvement of the internal audit program and methodology.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 3 years of experience in IT auditing, information security, or risk management.
• Solid understanding of IT audit methodologies, frameworks (e.g., COBIT, ISO 27001, NIST), and internal control principles.
• Experience in assessing security controls related to access management, data security, network security, and system development.
• Knowledge of regulatory requirements such as POPIA is essential.
• Familiarity with common operating systems (Windows, Linux) and database technologies.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to articulate audit findings effectively.
• Professional certifications such as CISA, CIA, or CISSP are highly preferred.
• Must be eligible to work in South Africa .

Benefits

• Our client offers a competitive salary, comprehensive medical aid, a generous retirement fund, and opportunities for professional development, including support for obtaining and maintaining relevant certifications.
• The Stellenbosch, Western Cape office provides a dynamic and scenic work environment.
• The hybrid work model promotes a healthy work-life balance.
• Employees benefit from access to cutting-edge audit tools and technologies.
• This role offers exposure to diverse business units and critical IT systems, providing significant learning opportunities.
• Our client values its employees and fosters a culture of collaboration and continuous improvement.
• There are clear pathways for career progression within the internal audit and broader assurance functions of the company.
• Additional benefits include wellness programs and team-building activities.