IT Security Assistant

• Serve as the primary point of contact for all internal and external IT audit engagements (planning, walkthroughs, evidence gathering).

• Maintain a comprehensive register of all IT audit findings, actively tracking them to resolution and managing stakeholders to ensure deadlines are met.

• Prepare weekly/monthly status reports , executive summaries, and audit readiness metrics for IT Management.

• Draft and update IT policies, procedures, standards, and guidelines to ensure alignment with audit requirements, regulatory expectations (e.g., POPIA ), and best practices (e.g., ISO, COBIT ).

• Liaise with IT technical teams to validate the resolution and closure of audit points within established deadlines.

• Draft formal remediation plans and motivations for deferred or accepted risk findings.

• Support the IT risk assessment process, including risk identification and mitigation tracking.

• Work with Audit, Risk, and Governance teams to embed control improvements and recommend control design enhancements.

• Assist in the monitoring and response to security alerts, incidents, and vulnerabilities.

• Conduct routine checks on system logs, access controls, and security tools.

• Provide first-level support for security-related queries and assist with user security awareness training.

• Support the administration of security tools (e.g., firewalls, antivirus) and assist in vulnerability assessments.

• National Diploma or Degree in Information Technology, Computer Science, or a related field.

• Certifications Preferred: CISA, CRISC, CGEIT, or ISO 27001 Lead Implementer/Auditor.

• 23 years experience in IT audit, IT risk management, IT compliance, or GRC roles is preferred.

• Experience in banking or financial services environments is highly advantageous.

• Familiarity with regulatory environments like SARB, FSCA, or international equivalents.

• Strong knowledge of IT General Controls (ITGC) , risk frameworks, and audit methodologies.

• Proficiency in Microsoft Excel, PowerPoint , and reporting tools (e.g., Power BI).

• Working knowledge of ITSM and GRC platforms (e.g., Service Desk, TeamMate) is beneficial.

• Familiarity with governance frameworks such as COBIT, ITIL, NIST, and ISO/IEC 27001 .
  

Benefits:

• Competitive salary based on experience (salary can potentially be more based on experience/skills)

IF you meet the above requirements and want to make a career-changing move, apply today by emailing your CV to *****@*****.co.za