Senior Information Security Auditor

Placements24; Polokwane; Hybrid; ZAR 780,000 - 1,200,000; Full time

Benefits offered by this job

Medical aid

Retirement fund contributions

Hybrid work model

Professional growth opportunities

Job summary

Placements24 is seeking a Senior Information Security Auditor to join its assurance team in Polokwane. This hybrid role focuses on evaluating information security controls and ensuring regulatory compliance across diverse client environments.

You will conduct audits, document findings, and provide remediation guidance in line with ISO 27001 and NIST frameworks, while mentoring junior staff and contributing to audit methodologies. Travel occasionally to client sites within Limpopo.

Qualifications

• Bachelor's degree in IT/CS/Accounting or related field.
• 5+ years in information security auditing or related compliance.
• Knowledge of ISO 27001, NIST frameworks.
• Experience with IT audits, vulnerability assessments, and compliance reviews.
• Strong report writing and communication skills.
• Certs such as CISA, CISSP, CISM or CRISC desirable.
• Willingness to travel occasionally; hybrid role from Polokwane.

Responsibilities

• Plan and conduct information security audits, including risk assessments.
• Evaluate compliance with ISO 27001, NIST CSF, and regulatory requirements.
• Identify weaknesses, non-compliance issues, and security risks.
• Draft audit reports with clear findings and remediation recommendations.
• Collaborate with auditees to gather evidence and conduct interviews.
• Mentor junior auditors and contribute to audit methodologies.
• Maintain independence and objectivity in engagements.

Skills

Analytical skills

Problem-solving

Critical thinking

Communication skills

Report writing

Education

Bachelor's degree in Information Technology/Computer Science/Accounting

Tools

ISO 27001

NIST CSF

Job description

About the Role

Our client, a prominent regulatory compliance firm, is seeking a detail-oriented and experienced Senior Information Security Auditor to join their assurance team. This hybrid role, primarily based in Polokwane , will focus on evaluating the effectiveness of information security controls and ensuring compliance with industry standards and regulations. You will conduct comprehensive audits, identify control deficiencies, and provide actionable recommendations to enhance the security posture of various organizations. This is a challenging opportunity for a seasoned auditor to contribute to robust compliance frameworks within Limpopo .

Key Responsibilities

Plan and execute information security audits, including risk assessments and control testing. Evaluate compliance with relevant security standards (e.g., ISO 27001, NIST Cybersecurity Framework) and regulatory requirements. Identify and document control weaknesses, non-compliance issues, and security risks. Develop detailed audit reports with clear, concise findings and practical recommendations for remediation. Collaborate with auditees to gather evidence, conduct interviews, and validate findings. Provide guidance and support to clients on improving their information security posture and compliance programs. Stay current with evolving security threats, vulnerabilities, and best practices. Mentor and guide junior auditors, sharing expertise and fostering professional development. Participate in the development and enhancement of audit methodologies and tools. Maintain independence and objectivity throughout all audit engagements.

Requirements

Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field. Minimum of 5 years of experience in information security auditing, risk management, or a related compliance role. Strong understanding of information security principles, frameworks (ISO 27001, NIST), and common control objectives. Experience with conducting IT audits, vulnerability assessments, and compliance reviews. Excellent analytical, problem-solving, and critical thinking skills. Strong report writing and communication skills. Relevant certifications such as CISA, CISSP, CISM, or CRISC are highly desirable. Ability to work independently and manage audit projects effectively. Willingness to travel occasionally to client sites. Ability to work a hybrid schedule from our Polokwane office.

Benefits

Our client offers a competitive salary package, commensurate with experience and qualifications, along with comprehensive benefits including medical aid and retirement fund contributions. Opportunities for professional growth through training, certifications, and exposure to diverse audit environments are provided. This role operates on a Hybrid model, offering flexibility and balance while working from our Polokwane office. Contribute your expertise to ensuring robust security and compliance for organizations in the Limpopo region.