Senior IT Security Auditor

Placements24; Randburg; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance

Professional development

Generous annual leave

Retirement fund

Employee assistance program

Job summary

Placements24 seeks a Senior IT Security Auditor for its Randburg, Gauteng team. You will lead IT security audits, assess ITGC and application controls, and ensure regulatory compliance across POPIA, FICA, and Basel. The role requires strong analytical and reporting skills.

You will collaborate with IT and business units to communicate findings and drive improvements, aligning with ISO 27001 and NIST standards. Professional certifications are highly desirable.

Qualifications

• Bachelor's degree required in information systems, computer science, accounting or related field.
• Minimum of 5 years of IT auditing, IT risk management, or information security experience.
• Experience conducting IT security audits including risk assessments and control evaluations.
• Strong understanding of IT general controls, cybersecurity principles, and IT infrastructure components.
• Familiarity with COBIT, ISACA standards, ISO 27001 and NIST frameworks; regulatory compliance for financial services.
• Certifications such as CISA, CISSP or CRISC are highly desirable.
• Experience with data analytics tools for audit purposes is a plus.

Responsibilities

• Plan, execute, and report on IT security audits using established methodologies and standards.
• Assess the design and operating effectiveness of IT general controls and application controls.
• Evaluate regulatory adherence (POPIA, FICA, Basel) and best practices (ISO 27001, NIST).
• Identify IT security risks and recommend mitigation strategies and control enhancements.
• Perform forensic investigations and incident response support as needed.
• Collaborate with IT, security, and business units to address audit findings.
• Develop and maintain relationships with IT management and external auditors.
• Stay updated on emerging IT security risks and regulatory changes.
• Prepare clear audit reports for senior management and committees.

Skills

IT auditing

Risk assessment

Control evaluation

Regulatory compliance

Cybersecurity principles

Audit reporting

Forensic investigations

Data analytics

Education

Bachelor's degree in Information Systems / Computer Science / Accounting

Tools

COBIT

ISACA standards

ISO 27001

NIST

Job description

Our client, a prominent financial services organization, is seeking a highly experienced Senior IT Security Auditor to join their established assurance team in Randburg, Gauteng . This role is critical in evaluating the effectiveness of the organization's IT controls, ensuring compliance with regulatory requirements, and identifying areas for security improvement. You will be responsible for planning and executing IT security audits, assessing risks, and providing actionable recommendations to management. The ideal candidate possesses a strong background in IT auditing, a deep understanding of cybersecurity frameworks, and excellent analytical and reporting skills. This is an excellent opportunity to make a significant impact on the security and compliance posture of a leading financial institution, work within a highly professional environment, and contribute to maintaining trust and integrity in its operations. You will be key in ensuring robust governance and risk management.

Key Responsibilities

• Plan, execute, and report on IT security audits in accordance with established audit methodologies and standards.
• Assess the design and operating effectiveness of IT general controls (ITGC) and application controls.
• Evaluate the organization's adherence to regulatory requirements (e.g., POPIA, FICA, Basel Accords) and industry best practices (e.g., ISO 27001, NIST).
• Identify IT security risks and vulnerabilities, and recommend appropriate mitigation strategies and control enhancements.
• Conduct security reviews of new systems, applications, and IT projects to ensure security considerations are addressed.
• Perform forensic investigations and incident response support as needed.
• Collaborate with IT, security, and business units to ensure audit findings are understood and addressed.
• Develop and maintain strong working relationships with IT management and external auditors.
• Stay abreast of emerging IT security risks, threats, and regulatory changes.
• Prepare clear, concise, and actionable audit reports for senior management and relevant committees.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• Minimum of 5 years of experience in IT auditing, IT risk management, or information security.
• Proven experience conducting IT security audits, including risk assessments and control evaluations.
• Strong understanding of IT general controls, cybersecurity principles, and common IT infrastructure components.
• Familiarity with major IT audit frameworks (e.g., COBIT, ISACA standards) and security frameworks (e.g., ISO 27001, NIST).
• Experience with regulatory compliance requirements relevant to the financial services industry.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to present findings effectively.
• Professional certifications such as CISA, CISSP, or CRISC are highly desirable.
• Experience with data analytics tools for audit purposes is a plus.

Benefits

• Competitive salary package with performance-based incentives.
• Comprehensive health insurance, including medical and dental coverage.
• Opportunities for professional development and continuing education.
• Generous annual leave and paid time off.
• Retirement fund and savings plan.
• Exposure to a challenging and dynamic financial environment.
• Professional growth and career advancement opportunities.
• Collaborative and supportive work culture.
• Membership fees for professional bodies covered.
• Employee assistance program.