Remote Information Security Auditor

About the Role

Our client is seeking a meticulous and knowledgeable Remote Information Security Auditor to join their compliance and assurance team. This role is entirely remote, focusing on evaluating the effectiveness of the organization's security controls and ensuring adherence to internal policies and external regulations. You will conduct comprehensive audits, identify compliance gaps, and recommend remediation actions to strengthen the overall security posture. This is an excellent opportunity for an auditor passionate about cybersecurity and compliance who prefers the flexibility and autonomy of a remote work environment.

Key Responsibilities

• Plan and execute information security audits across various systems, applications, and business processes.

• Assess compliance with relevant regulations (e.g., POPIA, GDPR) and industry standards (e.g., ISO 27001, NIST).

• Evaluate the design and operating effectiveness of internal controls related to data security and privacy.

• Identify security risks and control deficiencies, documenting findings clearly and concisely.

• Develop actionable recommendations for remediation and track their implementation progress.

• Prepare detailed audit reports for management and relevant stakeholders.

Requirements

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.

• 3-5 years of experience in information security auditing, compliance, or risk management.

• Professional certifications such as CISA, CISSP, or CRISC are highly preferred.

• Strong understanding of IT control frameworks, risk assessment methodologies, and audit principles.

• Familiarity with data privacy regulations and cybersecurity best practices.

• Excellent written and verbal communication skills, with the ability to document complex findings clearly.

Benefits

• Competitive salary and performance-based incentives.

• 100% remote work opportunity with a supportive virtual team.

• Comprehensive health and wellness benefits package.

• Support for professional development, including certifications and training.

• Opportunity to influence and improve security practices across the organization.