GRC Auditor

Location: South Africa (Remote)

Salary: R400,000 – R650 000 (dependent on experience)

Cognisys is a leading Cyber Security company specialising in Penetration Testing, GRC Consulting, and Managed Security services. We pride ourselves on our customer service, forward-thinking approach, and commitment to excellence. Our small but mighty team works with some of the best-known companies in the world, covering over 30 countries worldwide!

About the Role

Our GRC practice helps organisations strengthen their security posture, achieve certification, and maintain effective governance through structured, evidence-based assurance.

We operate a modern, forward-thinking audit function that assesses organisations against both established industry standards and emerging security and privacy frameworks. By combining deep expertise with leading audit and GRC tooling, we deliver high-quality, efficient, and insight-driven assurance that provides clarity, confidence, and measurable improvement. We work with clients across a wide range of industries and maturity levels, supporting everything from foundational compliance programmes to complex, multi-standard environments.

We are seeking a GRC Auditor to join our GRC team. This is a client-facing, delivery-focused role suited to a detail-oriented assurance professional who is confident planning and performing audits, evaluating control effectiveness, and producing clear, actionable findings. You will be part of a high-performing audit function that embraces innovation, modern methodologies, and best-in-class tooling to deliver efficient, high-impact assurance engagements.

As a GRC Auditor, you will deliver audit engagements across multiple clients and frameworks, assessing compliance against recognised standards as well as emerging regulatory and security requirements. You will support organisations in preparing for certification and external assurance, working closely with consultants, project managers, and client stakeholders to ensure audit activities are thorough, objective, and aligned to professional audit standards. You will also contribute to a progressive audit environment that continuously evolves its methods, technology, and approach to reflect the changing security landscape.

This role suits someone with strong foundational audit knowledge, practical experience with security and management system frameworks, and a desire to develop as a trusted assurance professional within a growing, technology-driven GRC practice.

Key Responsibilities

Audit Delivery

• Lead and support the delivery of audit engagements across multiple clients and sectors.

• Plan and conduct audits against recognised management systems and security frameworks.

• Evaluate the design and effectiveness of controls through documentation review, sampling, and stakeholder interviews.

• Gather, validate, and document audit evidence in line with established methodologies.

• Identify non-conformities, observations, and opportunities for improvement.

• Prepare structured audit reports with clear, risk-based findings and practical recommendations.

• Support clients in understanding audit outcomes and next steps for remediation.

Client Engagement & Assurance Support

• Conduct audit interviews with client stakeholders at operational and management levels.

• Support organisations preparing for certification, surveillance, or external assessments.

• Collaborate with GRC consultants and project managers during wider client engagements.

• Provide assurance insights that inform risk management and control improvement activities.

• Maintain professional independence and objectivity throughout audit engagements.

Quality & Professional Standards

• Apply consistent audit methodology aligned to recognised assurance practices.

• Produce high-quality documentation with clarity, accuracy, and traceable evidence.

• Manage audit timelines, deliverables, and engagement scope effectively.

• Maintain confidentiality, professional ethics, and impartiality in all activities.

• Contribute to the continuous improvement of internal audit processes, templates, and approaches.

Requirements

• Experience conducting or supporting audits, ideally within security, risk, or compliance…