About the Role
Our client is seeking a meticulous and experienced Information Security Auditor to join their fully remote team. This role is vital for ensuring the company's adherence to security policies, standards, and regulatory requirements. You will be responsible for planning, conducting, and reporting on security audits across various IT systems and processes. The ideal candidate will have a strong understanding of audit methodologies, risk assessment, and control frameworks. This position offers the flexibility to work remotely while contributing to the assurance of our client's security posture. You will work independently and as part of a distributed team to assess and improve security controls.
Key Responsibilities
- Plan and execute information security audits to assess compliance with policies, procedures, and regulations.
- Evaluate the effectiveness of security controls, including technical, administrative, and physical safeguards.
- Identify control gaps, risks, and areas for improvement, and recommend corrective actions.
- Document audit findings, conclusions, and recommendations in comprehensive reports.
- Follow up on audit findings to ensure timely and effective remediation.
- Stay updated on relevant industry standards, best practices, and regulatory requirements (e.g., GDPR, POPIA, SOX).
- Collaborate with internal teams and external auditors as needed.
- Develop and maintain audit plans and work programs.
- Provide guidance on security best practices related to audit and compliance.
Requirements
- Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
- 3-5 years of experience in information security auditing, risk management, or compliance.
- Strong knowledge of IT audit principles, methodologies, and frameworks (e.g., COBIT, ISO 27001, NIST).
- Experience with risk assessment and control testing.
- Familiarity with various IT systems, including networks, databases, and applications.
- Excellent analytical, critical thinking, and problem-solving skills.
- Strong written and verbal communication skills, with the ability to present findings clearly and concisely.
- Ability to work independently, manage time effectively, and meet deadlines in a remote environment.
- Relevant certifications such as CISA, CRISC, or CISSP are highly desirable.
Benefits
- A competitive annual salary of .
- Comprehensive health and wellness benefits.
- Opportunities for continuous learning and professional certifications.
- Flexible work schedule and fully remote working arrangements.
- Generous paid time off and holiday allowance.
- Access to advanced auditing tools and resources.
- A collaborative and supportive virtual work environment.