InfoSec Auditor: Compliance, Risk & Controls Expert

Placements24; Kempton Park; On-site; ZAR 450,000 - 850,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Professional development opportunities

Job summary

Client Financial Services Institution in Gauteng seeks an Information Security Auditor to ensure compliance with ISO 27001, POPIA, GDPR and internal policies. The role focuses on risk assessment, control effectiveness, and remediation tracking, collaborating with IT and external auditors.

The ideal candidate has 3–5 years in security auditing, strong analytical skills, and relevant certifications. Based in Tembisa vicinity with opportunities to advance within audit and risk functions.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Accounting, or related field.
• 3–5 years in information security auditing, risk management, or IT compliance.
• Knowledge of ISO 27001, SOX, NIST, POPIA, GDPR.
• Experience with audit management software.
• CISA, CISSP, or CRISC certifications desirable.
• Familiarity with IT general controls (ITGC).

Responsibilities

• Plan and execute information security audits per standards (e.g., ISO 27001, POPIA, PCI DSS).
• Assess design and operating effectiveness of information security controls across IT systems and processes.
• Identify compliance gaps, control weaknesses, and risks.
• Document audit findings and track remediation progress.
• Collaborate with IT, business units, and external auditors to facilitate audits.
• Stay updated on evolving regulatory requirements and best practices.
• Develop and update audit programs and methodologies.
• Prepare comprehensive audit reports for management and stakeholders.

Skills

Information security auditing

Risk management

Regulatory compliance

Education

Bachelor's degree in Information Technology/Computer Science/Accounting

Tools

Audit management software

Job description

Client Financial Services Institution in Gauteng seeks an Information Security Auditor to ensure compliance with ISO 27001, POPIA, GDPR and internal policies. The role focuses on risk assessment, control effectiveness, and remediation tracking, collaborating with IT and external auditors.

The ideal candidate has 3–5 years in security auditing, strong analytical skills, and relevant certifications. Based in Tembisa vicinity with opportunities to advance within audit and risk functions.