Information Security Auditor

About the Role

Our client is seeking a meticulous Information Security Auditor to join their compliance and risk team in Nottingham . This role is essential for ensuring that the organization's security controls and processes meet industry standards and regulatory requirements. You will conduct audits, assess compliance, and provide recommendations for improving security posture. This is a fantastic opportunity for an individual with a keen eye for detail and a strong understanding of security best practices to contribute to the integrity and security of the organization.

Key Responsibilities

• Plan and execute information security audits and assessments.
• Evaluate the effectiveness of existing security controls and identify compliance gaps.
• Ensure adherence to relevant security standards and regulations (e.g., ISO 27001, GDPR, PCI DSS).
• Document audit findings, recommendations, and remediation plans.
• Work with internal teams to track and verify the implementation of corrective actions.
• Stay current with audit methodologies and cybersecurity best practices.

Requirements

• Proven experience as an Information Security Auditor or in a related compliance role.
• Strong knowledge of information security frameworks, standards, and regulations.
• Experience in conducting risk assessments and vulnerability evaluations.
• Excellent documentation and reporting skills.
• Familiarity with IT general controls and cybersecurity principles.
• Bachelor's degree in Computer Science, Information Systems, or a related field; relevant certifications like CISA, CRISC, or CISSP are highly desirable.

Benefits

• Competitive salary and benefits package.
• Hybrid working environment offering a blend of office and remote work.
• Opportunity to contribute to a crucial compliance function.
• Support for professional development and certifications.
• A structured and supportive work environment.