Senior Information Security Auditor

Placements24; Mbombela (Nelspruit); Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Placements24 is seeking a Senior Information Security Auditor in Nelspruit to plan and execute audits of information security controls, ensuring regulatory compliance and policy alignment. You will identify weaknesses, recommend remediation, and verify corrective actions.

The role requires 5+ years in information security auditing or IT risk management, a bachelor’s degree in a related field, and professional certifications such as CISA or CISSP are preferred. A hybrid work setup is available.

Qualifications

• Bachelor's degree in a related field.
• 5+ years in information security auditing or IT risk management.
• Knowledge of COBIT, ISO 27001, NIST frameworks.
• Experience with POPIA and GDPR regulatory requirements.
• CISA, CISSP, or CRISC certifications preferred.

Responsibilities

• Plan and conduct information security audits across systems and processes.
• Evaluate design and operation of security controls.
• Identify and document control deficiencies, risks and compliance gaps.
• Develop audit reports with actionable recommendations.
• Track remediation of audit findings and verify actions.
• Stay updated on cybersecurity threats, regulations and audit methodologies.

Skills

Auditing standards

Regulatory compliance

Communication skills

Certifications

Education

Bachelor's degree in a related field

Tools

COBIT

ISO 27001

NIST

Job description

About the Role

Our client is seeking an experienced Senior Information Security Auditor to join their team in Nelspruit. This role is responsible for planning and executing audits to assess the effectiveness of information security controls and ensure compliance with regulatory requirements and internal policies. You will play a key role in identifying control weaknesses, recommending remediation strategies, and verifying the implementation of corrective actions. The ideal candidate has a strong understanding of auditing principles, cybersecurity best practices and a proven ability to manage audit projects. You will contribute significantly to maintaining a robust and compliant security environment.

Key Responsibilities

• Plan and conduct comprehensive information security audits across various systems and processes.
• Evaluate the design and operational effectiveness of security controls.
• Identify and document control deficiencies, risks, and compliance gaps.
• Develop clear and concise audit reports with actionable recommendations.
• Track and verify the remediation of identified audit findings.
• Stay current with evolving cybersecurity threats, regulations, and audit methodologies.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• 5+ years of experience in information security auditing or IT risk management.
• Deep knowledge of auditing standards and frameworks (e.g., COBIT, ISO 27001, NIST).
• Experience with regulatory compliance requirements (e.g., POPIA, GDPR).
• Strong analytical, problem-solving, and communication skills.
• Professional certifications such as CISA, CISSP, or CRISC are highly preferred.

Benefits

• Competitive salary and annual bonus structure.
• Comprehensive medical aid, pension fund, and life insurance.
• Opportunities for professional development and advanced certifications.
• Hybrid work model offering flexibility.
• Work within a highly respected organization committed to security excellence.