Information Security Auditor

About the Role

Our client is seeking a meticulous Information Security Auditor to join their compliance and security assurance team, offering remote working flexibility from Norwich . This role is essential for ensuring the organization's adherence to internal security policies, external regulations, and industry best practices. You will conduct thorough audits of IT systems, processes, and controls to identify risks and ensure compliance. The ideal candidate is highly analytical, possesses strong knowledge of IT governance, and is dedicated to upholding the highest standards of information security and integrity.

Key Responsibilities

• Plan and execute internal information security audits across various IT domains and business units.
• Assess compliance with relevant regulations (e.g., GDPR, PCI DSS) and industry standards (e.g., ISO 27001).
• Review and test IT controls, including access controls, data security, and operational procedures.
• Identify security risks, vulnerabilities, and control deficiencies, and document findings clearly.
• Develop detailed audit reports with actionable recommendations for management.
• Follow up on audit findings to ensure remediation actions are effectively implemented.

Requirements

• Bachelor's degree in Information Technology, Accounting, or a related field.
• 2-4 years of experience in IT auditing, information security, or risk management.
• Solid understanding of IT audit principles, methodologies, and frameworks.
• Knowledge of common IT systems, network infrastructure, and security controls.
• Familiarity with data privacy regulations and compliance requirements.

Benefits

• Competitive salary and benefits package.
• Fully remote working arrangement.
• Opportunities for professional development and certification support (e.g., CISA, CRISC).
• Engage in critical work that ensures organizational security and compliance.
• A supportive team environment that values diligence and accuracy.