Information Security Auditor

About the Role

Our client is seeking an meticulous Information Security Auditor to ensure adherence to security policies and regulatory requirements in Edinburgh . This role is crucial for assessing the effectiveness of our client's security controls and identifying areas for improvement. You will conduct internal and external audits, review security documentation, and collaborate with various departments to uphold the highest standards of information security. This position offers a great opportunity to contribute to maintaining a secure and compliant operational environment in the beautiful city of Edinburgh .

Key Responsibilities

• Plan and execute information security audits based on established frameworks and standards (e.g., ISO 27001, GDPR).
• Evaluate the design and operating effectiveness of internal controls related to information security.
• Review and assess IT systems, networks, and data handling processes for compliance and security risks.
• Prepare detailed audit reports, highlighting findings, risks, and recommendations for remediation.
• Collaborate with IT, compliance, and business units to develop and track remediation plans.
• Conduct follow-up audits to verify the implementation of corrective actions.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 3 years of experience in information security auditing or a related compliance role.
• Strong understanding of information security principles, risk management, and IT controls.
• Familiarity with auditing tools and techniques.
• Certifications such as CISA, CISSP, or CRISC are highly preferred.

Benefits

• Competitive salary and performance-based incentives.
• Opportunities for professional development and ongoing training.
• Comprehensive health and wellness programs.
• A collaborative work environment with clear career progression paths in Edinburgh .
• Regular opportunities to engage with senior stakeholders on critical security matters.