Senior Information Security Auditor

Placements24; Vereeniging; Hybrid; ZAR 900,000 - 1,350,000; Full time

Benefits offered by this job

Hybrid work model

Professional development support

Competitive salary

Job summary

Placements24 is seeking a Senior Information Security Auditor in Vereeniging, Gauteng, for a hybrid role blending on-site engagements with remote work. You will assess IT general controls, application controls, and regulatory compliance, delivering actionable audit reports and remediation plans.

The ideal candidate has a Bachelor's degree in Information Systems/Accounting/CS, 5+ years in information security auditing, and certifications such as CISA, CISSP, or CRISC.

Qualifications

• Bachelor's degree in information systems, accounting, CS, or related field.
• 5+ years of information security auditing or IT audit experience.
• Knowledge of ISACA and IIA standards and frameworks such as COBIT and NIST.
• CISA, CISSP or CRISC certifications are highly desirable.
• Hybrid work arrangement in Vereeniging, Gauteng.

Responsibilities

• Plan and execute information security audits and assessments.
• Evaluate the design and operating effectiveness of IT general and application controls.
• Assess compliance with regulations and standards (ISO 27001, POPIA) and internal policies.
• Document findings and develop detailed audit reports with recommendations.
• Follow up on audit findings to ensure remediation.
• Stay current with auditing standards and emerging threats.
• Collaborate with IT and business stakeholders to understand processes and risks.
• Contribute to the improvement of internal audit methodology.

Skills

Auditing standards

Risk assessment

IT controls

Stakeholder communication

Cloud platforms

Analytical skills

Education

Bachelor's degree in Information Systems, Accounting, Computer Science, or related

Tools

COBIT framework

NIST framework

ISO 27001

Job description

About the Role

Our client is seeking an experienced Senior Information Security Auditor to join their esteemed organization in Vereeniging, Gauteng . This role is paramount in ensuring the effectiveness and compliance of the organization's information security controls and systems. The Senior Auditor will conduct thorough assessments, identify control weaknesses, and provide actionable recommendations to mitigate risks. This hybrid role allows for a blend of on-site engagement and remote flexibility, fostering a productive and adaptable work environment. The ideal candidate will possess a deep understanding of auditing principles, regulatory requirements, and IT controls. We are looking for a detail-oriented, analytical professional who can drive improvements in our client's security posture and maintain the integrity of their information assets. Your expertise will be crucial in safeguarding the organization against emerging threats.

Key Responsibilities

• Plan and execute information security audits and assessments.
• Evaluate the design and operating effectiveness of IT general controls and application controls.
• Assess compliance with relevant regulations, standards (e.g., ISO 27001, POPIA), and internal policies.
• Identify security vulnerabilities and control deficiencies, and document findings.
• Develop and present detailed audit reports with practical recommendations to management.
• Follow up on audit findings to ensure timely and effective remediation.
• Stay current with auditing standards, security best practices, and emerging threats.
• Collaborate with IT and business stakeholders to understand processes and risks.
• Contribute to the development and improvement of the internal audit methodology.

Requirements

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• 5+ years of experience in information security auditing, IT audit, or a related control function.
• Strong knowledge of auditing standards (e.g., ISACA, IIA) and frameworks (e.g., COBIT, NIST).
• Experience with risk assessment methodologies and control testing.
• Familiarity with various IT environments, including networks, operating systems, databases, and cloud platforms.
• Excellent analytical, problem-solving, and report-writing skills.
• Strong interpersonal and communication skills to effectively interact with stakeholders.
• Professional certifications such as CISA, CISSP, or CRISC are highly desirable.
• Ability to work effectively in a hybrid work model in Vereeniging, Gauteng.

Benefits

Our client offers a competitive salary, comprehensive benefits package, and opportunities for professional growth and development. This hybrid role provides flexibility and a healthy work-life balance. You will have the opportunity to work with a dedicated team and contribute to the security and compliance of a reputable organization. Professional development support, including training and certification opportunities, is provided.

Join our client in Vereeniging, Gauteng and make a significant impact on their security assurance practices. We value our employees and foster a supportive and collaborative work environment.