Information Security Auditor

About the Role

Our client is seeking a meticulous Information Security Auditor to join their team, operating remotely with a focus on supporting their operations in Nottingham . This role is crucial for evaluating the effectiveness of the organisation's security controls and ensuring adherence to internal policies and external regulations. You will conduct comprehensive audits, identify areas of non-compliance, and recommend improvements to strengthen the overall security posture. This is an excellent opportunity for an auditor to contribute to a robust security framework.

Key Responsibilities

• Plan and execute information security audits and risk assessments.
• Evaluate the design and effectiveness of IT controls and security systems.
• Assess compliance with relevant regulations, standards, and company policies.
• Identify security risks and vulnerabilities, documenting findings and recommendations.
• Prepare detailed audit reports for management and relevant stakeholders.
• Follow up on audit findings to ensure timely and effective remediation actions are implemented.

Requirements

• Bachelor's degree in Information Systems, Computer Science, or a related field.
• 3-5 years of experience in information security auditing, risk management, or compliance.
• Strong understanding of IT audit principles and methodologies.
• Knowledge of industry standards and frameworks such as ISO 27001, NIST, and COBIT.
• Excellent analytical, reporting, and communication skills for remote work .
• Professional certifications such as CISA, CRISC, or CISSP are highly desirable.

Benefits

• Competitive salary and performance-based incentives.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and retirement savings plan.
• Opportunities for professional development and continuing education.
• A flexible remote working environment that promotes a good work-life balance.