Information Security Auditor

Our client, a well-established auditing firm, is seeking an Information Security Auditor to join their team in Kimberley. This role will be responsible for evaluating the effectiveness of information security controls and ensuring compliance with regulatory requirements and internal policies. You will conduct audits across various business units, identify control deficiencies, and recommend remediation strategies. The position involves a hybrid work model, allowing for a balance between office-based collaboration and remote work flexibility.

The ideal candidate will have a strong understanding of IT audit principles and a keen eye for detail to assess complex security systems.

• Plan and execute information security audits and assessments based on established methodologies and frameworks (e.g., ISO 27001, NIST).
• Evaluate the design and operating effectiveness of IT controls, including access controls, change management, and data security.
• Identify and document control gaps, risks, and non-compliance issues.
• Develop detailed audit reports, including findings, recommendations, and management action plans.
• Communicate audit results to management and stakeholders in a clear and concise manner.
• Follow up on remediation actions to ensure timely and effective resolution of identified issues.
• Stay current with evolving IT audit standards, security threats, and regulatory requirements.
• Collaborate with internal IT and business teams to understand processes and controls.
• Participate in special investigations and projects as required.
• Maintain audit independence and professional skepticism throughout the audit process.

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• Minimum of 3 years of experience in IT auditing, information security, or a related field.
• Solid understanding of IT audit methodologies, risk assessment, and control frameworks (e.g., COBIT, ISO 27001, NIST).
• Knowledge of common IT security controls and technologies (e.g., firewalls, intrusion detection systems, access management).
• Experience with data analysis and audit software is a plus.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Effective written and verbal communication skills.
• Ability to work independently and manage multiple audit engagements simultaneously.
• Professional certifications such as CISA, CISSP, or CISM are highly desirable.
• Must be able to work in a hybrid capacity from Kimberley.

• This role offers a competitive salary, opportunities for professional development and certification support, participation in a profit-sharing scheme, and a flexible hybrid work arrangement.
• You’ll join a reputable firm that values its employees and provides a challenging yet rewarding work environment in Kimberley.
• Our client is committed to fostering career growth and promoting work-life balance.