Information Security Auditor

About the Role

Our client is seeking a meticulous and knowledgeable Information Security Auditor to join their compliance and assurance team in Oxford . This role is essential for assessing the effectiveness of the organization's security controls, ensuring adherence to internal policies, and compliance with external regulations. You will conduct audits, identify control gaps, and provide recommendations for improvement, playing a key part in maintaining a robust governance, risk, and compliance (GRC) framework. This is an excellent opportunity for a detail-oriented professional to contribute to the company's security assurance efforts within a structured environment.

Key Responsibilities

• Plan and execute information security audits across various systems, processes, and departments.
• Assess compliance with relevant regulatory requirements (e.g., GDPR, ISO 27001) and internal policies.
• Identify security control deficiencies and potential risks, documenting findings clearly.
• Develop practical recommendations for remediation and track their implementation.
• Prepare comprehensive audit reports for management and relevant stakeholders.
• Stay updated on changes in security regulations and industry best practices relevant to auditing.

Requirements

• Experience in information security auditing, compliance, or risk management.
• Strong understanding of audit methodologies, GRC principles, and common security frameworks.
• Familiarity with data privacy regulations and IT control environments.
• Excellent analytical, report writing, and communication skills.
• Relevant certifications such as CISA, CISSP, or CISM are preferred.

Benefits

• Competitive salary and opportunities for professional growth.
• Comprehensive health and wellness benefits package.
• Company pension scheme and other retirement savings plans.
• Generous holiday entitlement and opportunities for training.
• A professional and supportive work environment in the historic city of Oxford .