Information Security Auditor

Job not on LinkedIn

🔥 0 minutes ago

🇿🇦 South Africa – Remote

💵 R450k - R650k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cognisys

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔒 Cybersecurity

📋 Compliance

💼 Consulting

💰 Debt financing on 2023-04

Cybersecurity • Compliance • Consulting

Cognisys is a cybersecurity and compliance consultancy that provides governance, risk and compliance (GRC) services, CREST-accredited penetration testing, and vulnerability management. They act as a security and compliance partner (including vCISO engagements), and are a leading global service partner for Vanta, helping clients accelerate compliance like SOC 2 and ISO 27001. Cognisys operates internationally with multiple regional teams and offices, offers remote and hybrid roles, and emphasizes agile, client-focused delivery for organisations ranging from startups to large enterprises.

📋 Description

• Conduct information security audits, control assessments and compliance reviews across clients and industries • Assess the design, implementation and operating effectiveness of information security controls • Review client environments, processes and supporting documentation • Gather, examine and validate evidence for audit findings and conclusions • Identify control deficiencies, non-conformities and potential security risks • Assess alignment with ISO 27001, SOC 2, NIST and related requirements • Support internal and external audit activities, including certification and assurance assessments • Evaluate technical and organisational controls including access management, asset management, vulnerability management, incident response and business continuity • Review policies, procedures, risk registers and governance documentation • Analyse weaknesses and determine potential impact on security posture • Develop evidence-based audit findings and practical recommendations • Follow up on remediation activities • Produce accurate audit reports and supporting documentation • Maintain audit trails and evidence records • Manage assigned audit activities, priorities and deadlines • Maintain independence, professional judgement and attention to detail • Stay informed about emerging cybersecurity risks, threats, controls and industry practices • Communicate audit outcomes to technical and non-technical stakeholders

🎯 Requirements

• 2–5 years' experience in information security, IT auditing, cybersecurity, risk or compliance-related roles • Practical knowledge of at least one recognised framework or standard, such as ISO 27001, SOC 2, NIST or similar • Experience assessing security controls, reviewing evidence or supporting audit and assurance activities • Understanding of information security principles, technical controls and risk management • Strong analytical skills and ability to investigate issues, identify weaknesses and draw evidence-based conclusions • Excellent written communication skills, particularly when documenting findings and preparing reports • Confidence engaging with technical and non-technical stakeholders • Strong organisational skills and ability to manage multiple audit activities and deadlines • Relevant certifications are advantageous but not essential • Desirable: previous IT, information security or cybersecurity audit experience • Desirable: exposure to external audits, certification assessments or independent assurance engagements • Desirable: experience with GRC platforms such as Vanta • Desirable: familiarity with identity and access management, network security, vulnerability management and incident response

🏖️ Benefits

• 25 days annual leave per year plus 12 South African public holidays • 1 day of paid leave for your Birthday • Individual healthcare insurance plan • Access to an employee mental health and wellbeing platform • £2,000 annual training budget • Up to £2,000 per successful referral • Collaborative and innovative team environment • Challenging projects with real client impact • Professional growth encouraged • Reasonable adjustments for individual needs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume