Information Security Auditor

About the Role

Our client is seeking a detail-oriented Information Security Auditor to join their team in Sheffield . This role is essential for evaluating the effectiveness of security controls, ensuring compliance with policies and regulations, and identifying areas for improvement within the organization's security posture. You will conduct audits, assess risks, and work closely with various departments to implement corrective actions. This is a critical function for maintaining a strong and compliant security framework.

Key Responsibilities

• Plan, execute, and document information security audits according to established audit programs and methodologies.
• Assess the design and operating effectiveness of security controls across IT infrastructure, applications, and processes.
• Identify control weaknesses, non-compliance issues, and potential security risks, providing clear and concise recommendations.
• Conduct follow-up reviews to ensure that audit recommendations have been effectively implemented.
• Collaborate with IT, risk management, and business units to facilitate audit processes and remediation efforts.
• Stay informed about evolving security threats, regulatory requirements, and industry best practices relevant to auditing.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• 3-5 years of experience in information security auditing , IT risk management, or a related compliance role.
• Strong understanding of IT general controls (ITGC) and security frameworks (e.g., COBIT, NIST, ISO 27001).
• Experience with risk assessment methodologies and audit techniques.
• Proficiency in documentation and reporting of audit findings.
• Professional certifications such as CISA, CISSP, or CRISC are highly advantageous.

Benefits

• Competitive annual salary with performance-based incentives.
• Opportunity to work on diverse audit projects within the organization.
• Comprehensive health, dental, and vision insurance coverage.
• Support for professional development and certifications.
• Structured career path within the audit and risk management function.
• Contribute to enhancing the security and compliance posture in Sheffield .