IT Auditor

SUMMARY:
Join Our Team as an IT Auditor in Cape Town - Protect and Strengthen Our Technology and Security

POSITION INFO:
Our client is looking for an IT Audit Specialist to strengthen their technology and security capabilities. This role is ideal for someone who is passionate about protecting information assets, ensuring compliance, and enhancing IT processes across the organization.

The client is a respected organisation with a strong and established presence in the market. Renowned for their forward-thinking approach, they prioritise innovation, resilience, and secure technology solutions.

Take the next step into the specialist role - send your CV

Duties:

• Conduct independent IT audits to evaluate the effectiveness of IT controls, processes, and systems.
• Assess IT governance, risk management, and compliance with regulatory requirements (e.g., SOX, GDPR).
• Perform risk-based audits on IT systems, applications, and infrastructure to identify vulnerabilities and control gaps.
• Review and evaluate IT policies, procedures, and security measures to ensure data integrity and confidentiality.
• Conduct pre- and post-implementation reviews of system upgrades, new applications, and IT projects.
• Collaborate with management to develop recommendations for improving IT processes and controls.
• Prepare detailed audit reports, documenting findings, risks, and actionable recommendations.
• Follow up on the implementation of audit recommendations to ensure corrective actions are taken.
• Stay up to date with emerging IT risks, technologies, and best practices in IT auditing.
• Support internal and external audit activities as needed.

• Matric (Grade 12)
• Minimum of a BCom IT or BSc IT degree.
• One or more of the following certifications
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Other recognised IT certifications

• 4-6 years of relevant IT Audit experience.

• Resilient, self-motivated, and able to work independently
• Strong analytical thinking, problem-solving, and quantitative skills.
• Effective collaboration and communication with teams and stakeholders.
• Ability to implement, execute, and follow through on tasks
• Continuous learning and professional self-improvement
• Technical expertise in vulnerability scanning, Python, Metasploit, Nmap, Linux, server administration, IT infrastructure, and database structures.
• Solid understanding of web application vulnerabilities, injection attacks, port scanning, brute forcing, DoS, firewalls, and general IT controls.