IT Security Auditor

Telebest; Randburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A leading recruitment agency is looking for an experienced IT Security Auditor to join a client based in Johannesburg. The ideal candidate will hold a Bachelor's degree in Computer Science, with over five years of experience in cybersecurity. You'll be responsible for conducting internal audits, coordinating responses to security incidents, and maintaining compliance with standards like PCI DSS and HIPAA. Strong skills in Windows and Linux environments are essential along with experience in security tools like SIEM. This role is crucial for enhancing the organization’s security posture.

Qualifications

• Five or more years of experience in cybersecurity-related roles.
• Working knowledge of security standards including PCI DSS, SOC 2, and HIPAA.
• Understanding of GPOs and Active Directory.

Responsibilities

• Conduct internal audits of security controls.
• Coordinate response to security incidents.
• Develop and update the business continuity plan.
• Ensure compliance with security regulations.
• Conduct risk analyses and maintain security awareness.

Skills

Cybersecurity

Windows Servers

Linux Servers

Network Security

Office 365 Administration

Risk Analysis

Education

Bachelor's degree in Computer Science or similar

Tools

SIEM

IPS/IDS Systems

Web Filters

Job description

Our client has an opportunity available for an IT Security Auditor based in Johannesburg.

Requirements

• Computer science or a similar field bachelor's degree is compulsory.
• Five or more years of experience in jobs involving cybersecurity.
• Working knowledge of security standards including PCI DSS, SOC 2, and HIPAA.
• Working knowledge of Windows PCs, Windows Servers, Linux Servers, switches, routers, firewalls, access points, and hardening standards.
• Expertise with Web filters, IPS/IDS systems, SIEM, and endpoint security programs.
• Proven administrative skills for Office 365, including security for SharePoint and Email.
• Understanding of GPOs and Active Directory.
• Knowledge of cryptographic principles.
• Understanding of physical security controls, such as security cameras and access control systems.
• CISSP, CISM or CISA certificates preferred.

KPAs

• Conduct internal audits of the administrative, physical, and logical security controls.
• Coordinate reaction to security incidents.
• Take the initiative in developing and updating the business continuity plan.
• Create, implement, track, and maintain compliance with all applicable security regulations, including HIPAA, SOC 2, and PCI DSS.
• Conduct risk analyses.
• Continue the program for security awareness.
• Offer security advice and recommendations.
• Keep track of security procedures and regulations.
• Organize external audits.