IT Security Auditor

Telebest; Randburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A leading IT consultancy is looking for an IT Security Auditor based in Johannesburg, South Africa. The ideal candidate will have over five years of experience in cybersecurity and be knowledgeable about security standards like PCI DSS and HIPAA. Key responsibilities include conducting audits, coordinating security incident responses, and maintaining compliance with security regulations. Cybersecurity certifications such as CISSP, CISM, or CISA are preferred.

Qualifications

• 5+ years of experience in cybersecurity.
• Proficiency in security standards like PCI DSS and HIPAA.
• Industry-recognized certifications such as CISSP, CISM, or CISA preferred.

Responsibilities

• Conduct internal audits of security controls.
• Coordinate response to security incidents.
• Develop and update the business continuity plan.
• Ensure compliance with security regulations.
• Conduct risk analyses.
• Maintain security awareness programs.

Skills

Cybersecurity expertise

Knowledge of security standards (PCI DSS, SOC 2, HIPAA)

Experience with Windows/Linux Servers

Network security knowledge

Administrative skills for Office 365

Understanding of Active Directory

Education

Bachelor's degree in Computer Science or similar

Tools

Web filters

SIEM systems

IPS/IDS systems

Job description

Overview

Our client has an opportunity available for an IT Security Auditor based in Johannesburg.

Requirements

• Computer science or a similar field bachelor's degree is compulsory.
• Five or more years of experience in jobs involving cybersecurity.
• Working knowledge of security standards including PCI DSS, SOC 2, and HIPAA.
• Working knowledge of Windows PCs, Windows Servers, Linux Servers, switches, routers, firewalls, access points, and hardening standards.
• Expertise with Web filters, IPS / IDS systems, SIEM, and endpoint security programs.
• Proven administrative skills for Office 365, including security for SharePoint and Email.
• Understanding of GPOs and Active Directory.
• Knowledge of cryptographic principles.
• Understanding of physical security controls, such as security cameras and access control systems.
• CISSP, CISM or CISA certificates preferred.

KPAs

• Conduct internal audits of the administrative, physical, and logical security controls.
• Coordinate reaction to security incidents.
• Take the initiative in developing and updating the business continuity plan.
• Create, implement, track, and maintain compliance with all applicable security regulations, including HIPAA, SOC 2, and PCI DSS.
• Conduct risk analyses.
• Continue the program for security awareness.
• Offer security advice and recommendations.
• Keep track of security procedures and regulations.
• Organize external audits.