About the Role
Our client, a global cybersecurity consulting firm, is actively seeking a motivated and detail-oriented Remote Information Security Auditor to join their expanding team. This position is ideal for a professional passionate about ensuring robust security controls and compliance across diverse client organizations, with the flexibility of a fully remote work arrangement. You will be responsible for evaluating the effectiveness of security policies, procedures, and technical controls, identifying risks, and providing actionable recommendations to clients. This role requires a strong understanding of various compliance frameworks and security best practices. As a remote employee, you will collaborate closely with clients and internal teams across different time zones, contributing significantly to the security posture of businesses worldwide from the comfort of your home office. This is a remote-first opportunity based out of the Durban operational region, but with no physical office requirement.
Key Responsibilities
- Conduct independent security audits and assessments of client IT environments, including networks, systems, applications, and data security.
- Evaluate compliance with relevant industry standards and regulations (e.g., ISO 27001, GDPR, PCI DSS, SOX).
- Identify security vulnerabilities, control weaknesses, and areas for improvement.
- Prepare detailed audit reports, findings, and recommendations for clients and management.
- Collaborate with clients to develop remediation plans and track their implementation.
- Stay current with evolving cybersecurity threats, vulnerabilities, and regulatory requirements.
- Develop and refine audit methodologies and tools.
- Present audit findings and recommendations to client stakeholders and internal leadership.
- Contribute to the development of the firm's knowledge base and best practices in information security auditing.
- Maintain professional skepticism and independence throughout all audit engagements.
Requirements
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
- Minimum of 4 years of experience in information security, IT auditing, or risk management.
- In-depth knowledge of various security frameworks (ISO 27001, NIST, COBIT) and compliance requirements.
- Experience with audit methodologies and techniques.
- Familiarity with common IT infrastructure components, network protocols, and cybersecurity technologies.
- Excellent written and verbal communication skills, with the ability to produce clear and concise reports.
- Strong analytical and problem-solving abilities.
- Ability to work independently and manage multiple audit projects simultaneously.
- Relevant certifications such as CISA, CISSP, CRISC, or CISM are highly desirable.
- Proven ability to work effectively in a remote setting.
Benefits
- Fully remote work arrangement, offering excellent work-life balance.
- Competitive salary package commensurate with experience.
- Performance-based bonuses and incentives.
- Opportunities for continuous learning and professional development, including certification support.
- Exposure to a wide range of industries and clients.
- Contribution to a globally recognized cybersecurity firm.
- Allowance for home office setup and internet connectivity.
- Flexible working hours.