Senior IT Auditor

Snatch.work; Johannesburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A tech-focused firm in Gauteng, Johannesburg seeks a Senior IT Auditor to lead risk-based audits and assess cybersecurity processes. The ideal candidate will have a Bachelor’s degree in Information Systems, CISA certification, and over 6 years of experience in IT auditing. Responsibilities include translating findings into recommendations and tracking remediation actions. This role requires strong technical knowledge and an ability to engage with senior stakeholders.

Qualifications

• 6+ years of IT audit experience in large or multi-entity organisations.
• Solid understanding of COBIT, NIST, and ISO with practical application.
• Broad technical knowledge across cybersecurity and cloud-based environments.

Responsibilities

• Lead and deliver risk-based IT audits across infrastructure and applications.
• Translate technical findings into clear, practical recommendations.
• Track agreed remediation actions and verify closure of control gaps.

Skills

IT governance

Cybersecurity

Data analysis

Audit management tools

Education

Bachelor’s degree in Information Systems or Computer Science

CISA qualification

Tools

TeamMate+

Galvanize

IDEA

Job description

Job title: Senior IT Auditor

Job location: Gauteng, Johannesburg

Application deadline: December 10, 2025

Key Responsibilities

• Lead and deliver risk-based IT audits across infrastructure, applications, and data environments.
• Assess IT general controls, cybersecurity processes, and technology governance practices.
• Identify and evaluate risks across key IT domains such as access management, change control, and system development.
• Translate technical findings into clear, practical recommendations that drive meaningful business improvements.
• Prepare and present concise audit reports to senior stakeholders, ensuring key risks are clearly communicated and understood.
• Track agreed remediation actions, follow up on implementation progress, and verify closure of control gaps.
• Partner with business and IT leadership to promote strong risk management and compliance practices.
• Stay informed on emerging technologies, evolving IT risks, and leading audit frameworks such as COBIT, NIST, and ISO.

Qualifications and Experience

• Bachelor’s degree in Information Systems, Computer Science, or a related field.
• CISA qualification required.
• 6+ years of IT audit experience, ideally gained in large or multi-entity organisations.
• Solid understanding of IT governance and control frameworks such as COBIT, NIST, and ISO, with practical experience applying them.
• Broad technical knowledge spanning cybersecurity, infrastructure, databases, and cloud-based environments.
• Familiarity with audit management and data analysis tools (e.g., TeamMate+, Galvanize, IDEA) is advantageous.
• Exposure to auditing emerging technologies, including AI and automation, is an asset.
• Resilient, proactive, and adaptable - able to perform effectively in dynamic, high-pressure settings while engaging confidently with senior leaders, including non-technical stakeholders.