IT Security Auditor

Our client has an opportunity available for an IT Security Auditor based in Johannesburg.

Requirements:

• Computer science or a similar field bachelor's degree is compulsory.
• Five or more years of experience in jobs involving cybersecurity.
• Working knowledge of security standards including PCI DSS, SOC 2, and HIPAA.
• Working knowledge of Windows PCs, Windows Servers, Linux Servers, switches, routers, firewalls, access points, and hardening standards.
• Expertise with Web filters, IPS/IDS systems, SIEM, and endpoint security programs.
• Proven administrative skills for Office 365, including security for SharePoint and Email.
• Understanding of GPOs and Active Directory.
• Knowledge of cryptographic principles.
• Understanding of physical security controls, such as security cameras and access control systems.
• CISSP, CISM or CISA certificates preferred.

KPAs:

• Conduct internal audits of the administrative, physical, and logical security controls.
• Coordinate reaction to security incidents.
• Take the initiative in developing and updating the business continuity plan.
• Create, implement, track, and maintain compliance with all applicable security regulations, including HIPAA, SOC 2, and PCI DSS.
• Conduct risk analyses.
• Continue the program for security awareness.
• Offer security advice and recommendations.
• Keep track of security procedures and regulations.
• Organize external audits.