Information Security Auditor

About the Role

Our client is seeking a diligent and analytical Information Security Auditor to join their internal audit team in Reading . This role is responsible for assessing the effectiveness of the organization's information security controls, policies, and procedures against established standards and regulatory requirements. You will conduct audits, identify control weaknesses, and provide recommendations for improvement to enhance the overall security posture. This position is crucial for maintaining compliance and mitigating risks within the organization's IT environment.

Key Responsibilities

• Plan and execute internal audits of information security controls and processes across various departments.
• Assess compliance with relevant regulations (e.g., GDPR, PCI DSS) and industry best practices (e.g., ISO 27001, NIST).
• Identify and document security control deficiencies and recommend corrective actions.
• Prepare detailed audit reports outlining findings, risks, and proposed remediation plans.
• Follow up on the implementation of audit recommendations to ensure effective resolution.
• Stay informed about emerging security threats and audit methodologies.

Requirements

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• Minimum of 3 years of experience in information security auditing , IT audit, or risk management.
• Strong understanding of IT audit principles, methodologies, and frameworks.
• Knowledge of common security controls, network infrastructure, and data protection measures.
• Excellent analytical, written, and verbal communication skills.
• Professional certifications such as CISA, CRISC, or CISSP are highly preferred.

Benefits

• Competitive salary with regular performance-based reviews.
• Comprehensive health, dental, and vision insurance.
• Pension plan with company contributions.
• Opportunities for professional development and advanced training.
• A structured work environment in Reading with a focus on career growth within the audit function.