Information Security Auditor - IT & Systems Assurance

Placements24; Klerksdorp; Hybrid; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Medical coverage

Retirement savings plan

Remote work flexibility

Job summary

Placements24 is seeking a meticulous Information Security Auditor to join its assurance team. The role is primarily remote, facilitating audits from a home workspace.

You will assess IT controls, regulatory compliance, and effectiveness, contributing to the integrity and availability of information systems across diverse technologies. The ideal candidate holds 3+ years in IT audit or information security, with knowledge of COBIT/COSO and privacy regs like POPIA and GDPR.

Qualifications

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• Minimum of 3 years of experience in IT audit, information security, or a related field.
• Solid understanding of IT control frameworks (e.g., COBIT, COSO) and cybersecurity principles.
• Experience with IT systems, databases, and networks.
• Knowledge of data privacy regulations such as POPIA and GDPR.
• Proficiency with audit management software and data analysis tools is a plus.
• Strong analytical and written communication skills.
• Certifications such as CISA, CIA, or CISSP are highly desirable.
• Ability to work remotely and independently.

Responsibilities

• Plan and execute IT and information security audits based on established audit programs and risk assessments.
• Assess design and operating effectiveness of ITGCs, application controls, and cybersecurity controls.
• Evaluate compliance with POPIA, GDPR, ISO 27001, and NIST standards.
• Identify control deficiencies and develop remediation recommendations.
• Document audit findings, conclusions, and recommendations clearly.
• Communicate audit results to management and stakeholders; present findings and actions.
• Perform follow-up procedures to verify remediation is effective.
• Stay current with evolving IT audit practices and regulatory changes.
• Collaborate with internal audit, IT, and business units to strengthen the control environment.

Skills

IT audit

Information security

COBIT COSO

Privacy regs

Data analytics

Remote work

Education

Bachelor's degree in Information Systems or related field

Tools

Audit management software

Data analysis tools

Job description

About the Role

Our client is seeking a meticulous and detail-oriented Information Security Auditor to join their assurance team. This role is primarily remote , offering flexibility for professionals seeking to conduct audits and assessments from their own workspace. The auditor will be responsible for evaluating the effectiveness of IT controls, assessing compliance with security policies and regulatory requirements, and identifying areas for improvement. You will play a crucial role in ensuring the integrity, confidentiality, and availability of our client's information systems. This is an excellent opportunity for an auditor passionate about cybersecurity to contribute to a robust control environment and work with a diverse range of technologies. The successful candidate will contribute to maintaining a strong governance framework through thorough and insightful audits.

Key Responsibilities

• Plan and execute IT and information security audits based on established audit programs and risk assessments.
• Evaluate the design and operating effectiveness of internal controls related to IT general controls (ITGC), application controls, and cybersecurity.
• Assess compliance with relevant regulations (e.g., POPIA, GDPR) and industry standards (e.g., ISO 27001, NIST).
• Identify control deficiencies, assess their risks, and develop practical remediation recommendations.
• Document audit findings, conclusions, and recommendations clearly and concisely.
• Communicate audit results to management and stakeholders, including presenting findings and proposed actions.
• Perform follow-up procedures to ensure that management action plans are implemented effectively.
• Stay current with evolving IT audit best practices, emerging technologies, and relevant regulatory changes.
• Collaborate with internal audit, IT, and business units to foster a strong control environment.

Requirements

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• Minimum of 3 years of experience in IT audit, information security, or a related field.
• Solid understanding of IT control frameworks (e.g., COBIT, COSO) and cybersecurity principles.
• Experience with common IT systems and applications, including operating systems, databases, and networks.
• Knowledge of data privacy regulations such as POPIA and GDPR.
• Proficiency in using audit management software and data analysis tools is a plus.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to prepare professional audit reports.
• Relevant certifications such as CISA, CIA, or CISSP are highly desirable.
• Ability to work effectively and independently in a remote capacity.

Benefits

Our client offers a competitive salary package, commensurate with experience and qualifications. Benefits include comprehensive medical coverage and a retirement savings plan. This remote position provides exceptional flexibility and the opportunity to work from anywhere within South Africa. Opportunities for professional development and acquiring new certifications will be supported. You will be part of a supportive team environment focused on ensuring robust IT governance. The role offers the ability to work on diverse audit engagements, expanding your expertise in information security.