Senior IT Auditor - Information Security Focus

Placements24; Sandton; Hybrid; ZAR 650,000 - 900,000; Full time

Benefits offered by this job

Competitive salary package

Medical and retirement benefits

Bonuses

Professional development opportunities

Hybrid work arrangement

Job summary

Placements24 in Sandton seeks a Senior IT Auditor with a strong focus on information security to ensure the integrity, security, and regulatory compliance of IT systems. You will plan, execute, and report on audits, assess IT general controls, and provide remediation recommendations within a dynamic financial services context.

The role requires 5+ years in IT auditing, with solid knowledge of COBIT, IT governance, and cybersecurity principles, plus certifications like CISA, CISSP, or CISM.

Qualifications

• Bachelor's degree in IT, CS, Auditing or related field.
• Minimum 5 years of IT auditing experience with a strong focus on information security.
• Certifications such as CISA, CISSP or CISM are essential.
• Strong knowledge of IT governance frameworks (e.g., COBIT) and risk assessment methodologies.
• Experience with ITGC and application controls.

Responsibilities

• Plan, execute, and report on IT audits focusing on information security controls and infrastructure.
• Assess the design and operating effectiveness of IT general controls (ITGC) and application controls.
• Evaluate cybersecurity measures including access controls, network security, data protection and incident response.
• Identify IT risks and control weaknesses, documenting findings and providing remediation recommendations.
• Conduct special investigations into suspected IT-related fraud or policy violations.
• Ensure compliance with regulations and standards (e.g., POPIA, GDPR, ISO 27001).
• Collaborate with IT departments and business units to understand systems and processes.
• Review IT project implementations to ensure controls are embedded from design.
• Stay updated on emerging IT risks and audit best practices.

Skills

IT auditing

Information security

Analytical thinking

Report writing

Communication skills

Education

Bachelor's degree in IT/CS or Auditing

Tools

Audit software

Windows

Linux

Network technologies

Databases

Job description

About the Role

Our client, a prominent financial services group operating in Sandton, Gauteng , is seeking a highly skilled Senior IT Auditor with a strong focus on information security. This role is integral to ensuring the integrity, security, and compliance of our IT systems and infrastructure. You will be responsible for planning and executing IT audits, assessing control effectiveness, identifying vulnerabilities, and providing recommendations for remediation. The ideal candidate will possess a deep understanding of IT governance, cybersecurity principles, and various audit methodologies. You will play a crucial role in protecting sensitive data and ensuring our technological environment meets stringent regulatory and internal standards. This position offers a challenging and rewarding career path within a dynamic financial hub.

Key Responsibilities

• Plan, execute, and report on IT audits, focusing on information security controls and infrastructure.
• Assess the design and operating effectiveness of IT general controls (ITGC) and application controls.
• Evaluate cybersecurity measures, including access controls, network security, data protection, and incident response capabilities.
• Identify IT risks and control weaknesses, documenting findings and providing practical recommendations for remediation.
• Conduct special investigations into suspected IT-related fraud or policy violations.
• Ensure compliance with relevant regulations and standards (e.g., POPIA, GDPR, ISO 27001).
• Collaborate with IT departments and business units to understand systems and processes.
• Review IT project implementations to ensure controls are embedded from the design phase.
• Stay updated on emerging IT risks, cybersecurity threats, and audit best practices.

Requirements

• A Bachelor's degree in Information Technology, Computer Science, Auditing, or a related field.
• Minimum of 5 years of experience in IT auditing, with a significant specialization in information security.
• Professional certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), or CISM (Certified Information Security Manager) are essential.
• Strong understanding of IT governance frameworks (e.g., COBIT), cybersecurity principles, and risk assessment methodologies.
• Experience with various operating systems (Windows, Linux), network technologies, and database systems.
• Proficiency in audit software and tools.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to produce clear and concise audit reports.
• Ability to work independently and collaboratively within a team in Sandton .

Benefits

• Our client offers a competitive salary package, comprehensive medical and retirement benefits, and performance-related bonuses.
• Opportunities for continuous professional development, including further certifications and specialized training in cybersecurity, are provided.
• This hybrid role allows for flexibility, balancing work from our modern Sandton offices with remote workdays.
• Join a leading organization committed to maintaining the highest standards of IT governance and security in the vibrant Gauteng financial district.