Information Security Auditor

This is a fully remote position, open to applicants in South Africa.

📋 Description

• Perform information security audits, control assessments, and compliance evaluations across various clients and sectors.

• Evaluate the design, execution, and operational effectiveness of information security measures.

• Analyze client environments, processes, and accompanying documentation.

• Collect, review, and verify evidence for audit findings and conclusions.

• Identify control weaknesses, non-conformities, and potential security threats.

• Assess compliance with ISO 27001, SOC 2, NIST, and other relevant standards.

• Assist in both internal and external audit processes, including certification and assurance evaluations.

• Review technical and organizational controls such as access management, asset management, vulnerability management, incident response, and business continuity.

• Examine policies, procedures, risk registers, and governance documents.

• Analyze vulnerabilities and assess their potential impact on security posture.

• Generate evidence-supported audit findings and actionable recommendations.

• Follow up on corrective actions taken.

• Create precise audit reports along with supporting documentation.

• Maintain audit trails and records of evidence.

• Oversee assigned audit tasks, priorities, and timelines.

• Uphold independence, professional judgment, and meticulous attention to detail.

• Stay updated on emerging cybersecurity threats, risks, controls, and industry trends.

• Convey audit results to both technical and non-technical stakeholders.

⛳️ Requirements

• 2–5 years of experience in information security, IT auditing, cybersecurity, risk, or compliance-related positions.

• Practical expertise in at least one recognized framework or standard, such as ISO 27001, SOC 2, NIST, or similar.

• Experience in assessing security controls, reviewing evidence, or supporting audit and assurance activities.

• Understanding of information security principles, technical controls, and risk management practices.

• Strong analytical abilities with the capacity to investigate issues, pinpoint weaknesses, and draw evidence-based conclusions.

• Exceptional written communication skills, especially in documenting findings and producing reports.

• Confidence in engaging with both technical and non-technical stakeholders.

• Strong organizational skills with the ability to manage multiple audit tasks and deadlines.

• Relevant certifications are beneficial but not mandatory.

• Desirable: previous experience in IT, information security, or cybersecurity auditing.

• Desirable: familiarity with external audits, certification assessments, or independent assurance engagements.

• Desirable: experience with GRC platforms such as Vanta.

• Desirable: knowledge of identity and access management, network security, vulnerability management, and incident response.

🏝️ Benefits

• 25 days of annual leave each year, in addition to 12 South African public holidays.

• 1 day of paid leave to celebrate your Birthday.

• Individual healthcare insurance plan.

• Access to a mental health and wellbeing platform for employees.

• £2,000 annual training budget.

• Up to £2,000 for each successful referral.

• A collaborative and innovative team environment.

• Engaging projects that have a significant impact on clients.

• Professional development is encouraged.

• Reasonable accommodations for individual needs.