Information Security Auditor

About the Role

Our client is looking for a meticulous and analytical Information Security Auditor to join their team in Oxford . This role is essential for assessing the effectiveness of the organisation's security controls and ensuring compliance with internal policies and external regulations. You will conduct audits, identify control weaknesses, and provide recommendations for improvement to enhance the overall security posture. This is an excellent opportunity for a detail-oriented professional with a strong understanding of audit methodologies and cybersecurity principles to contribute to a secure operational environment. We are committed to continuous improvement in our security practices.

Key Responsibilities

• Plan and execute information security audits across various IT systems and business processes.
• Assess the design and operational effectiveness of security controls.
• Identify and document audit findings, control deficiencies, and non-compliance issues.
• Prepare detailed audit reports with clear recommendations for remediation.
• Follow up on audit findings to ensure timely and effective implementation of corrective actions.
• Stay current with audit standards, security best practices, and emerging risks.

Requirements

• Experience in information security auditing, IT audit, or a related compliance role.
• Good understanding of IT controls, risk management, and cybersecurity frameworks (e.g., ISO 27001, NIST).
• Familiarity with audit methodologies and reporting standards.
• Strong analytical and investigative skills.
• Excellent written and verbal communication skills.

Benefits

• Competitive salary and performance-based bonuses.
• Opportunities for professional growth and certifications (e.g., CISA, CISSP).
• Comprehensive health and wellness benefits.
• Pension scheme participation.
• Hybrid work model supporting work-life balance.