Information Security Auditor

About the Role

Our client is seeking a meticulous Information Security Auditor to join their compliance and risk management team in Norwich . This role is focused on assessing the effectiveness of security controls, ensuring adherence to regulatory standards, and identifying areas for improvement in the organisation's security posture. You will conduct internal audits, review security policies, and work collaboratively with various departments to maintain a strong security framework. This is an excellent opportunity for an individual with a keen eye for detail and a strong understanding of security governance in Norfolk .

Key Responsibilities

• Plan and execute internal information security audits to evaluate control effectiveness.
• Assess compliance with relevant security standards, regulations, and internal policies.
• Document audit findings, identify control weaknesses, and provide practical recommendations for remediation.
• Work with IT and business units to track the implementation of audit recommendations.
• Review and update security policies and procedures to align with evolving threats and regulatory requirements.
• Support external audits and regulatory examinations as needed.

Requirements

• Bachelor's degree in Accounting, Finance, Computer Science, Information Security, or a related field.
• 2-4 years of experience in information security auditing , risk assessment, or IT compliance.
• Understanding of cybersecurity principles and common control frameworks (e.g., NIST, ISO 27001).
• Experience with audit methodologies and documentation.
• Familiarity with data privacy regulations is a plus.
• Strong analytical skills and excellent written and verbal communication.

Benefits

• Competitive annual salary and benefits package.
• Opportunity to work within a reputable organisation focused on security and compliance.
• Structured career development and training opportunities.
• Generous holiday allowance and contributory pension scheme.
• A professional and supportive team environment.