It Security Auditor

Telebest; Gauteng; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A prominent recruitment agency is looking for an IT Security Auditor to be based in Johannesburg. The ideal candidate will have a bachelor's degree in Computer Science and over five years of experience in cybersecurity. Responsibilities include conducting audits, managing security incidents, and ensuring compliance with security regulations. Additional certifications like CISSP or CISM are preferred.

Qualifications

• Five or more years of experience in jobs involving cybersecurity.
• CISSP, CISM or CISA certificates preferred.

Responsibilities

• Conduct internal audits of security controls.
• Coordinate reaction to security incidents.
• Develop and update the business continuity plan.

Skills

Experience in cybersecurity

Knowledge of security standards (PCI DSS, SOC 2, HIPAA)

Technical skills with Linux Servers

Expertise with Web filters and endpoint security

Education

Bachelor's degree in Computer Science or similar field

Tools

Windows Servers

Firewalls

Security Information and Event Management (SIEM)

Job description

Overview

Our client has an opportunity available for an IT Security Auditor based in Johannesburg.

Requirements

• Computer science or a similar field bachelor's degree is compulsory.
• Five or more years of experience in jobs involving cybersecurity.
• Working knowledge of security standards including PCI DSS, SOC 2, and HIPAA.
• Working knowledge of Windows PCs, Windows Servers, Linux Servers, switches, routers, firewalls, access points, and hardening standards.
• Expertise with Web filters, IPS / IDS systems, SIEM, and endpoint security programs.
• Proven administrative skills for Office, including security for SharePoint and Email.
• Understanding of GPOs and Active Directory.
• Knowledge of cryptographic principles.
• Understanding of physical security controls, such as security cameras and access control systems.
• CISSP, CISM or CISA certificates preferred.

KPAs

• Conduct internal audits of the administrative, physical, and logical security controls.
• Coordinate reaction to security incidents.
• Take the initiative in developing and updating the business continuity plan.
• Create, implement, track, and maintain compliance with all applicable security regulations, including HIPAA, SOC 2, and PCI DSS.
• Conduct risk analyses.
• Continue the program for security awareness.
• Offer security advice and recommendations.
• Keep track of security procedures and regulations.
• Organize external audits.