Senior Information Systems Auditor - Southern Suburbs (Cape) at Flash Group

RESPONSIBILITIES:

• Conduct audits of information systems, IT infrastructure, and cybersecurity controls to assess compliance with regulatory requirements and industry standards.
• Evaluate the effectiveness of security controls, including access controls, network security, and data encryption.
• Perform vulnerability assessments, penetration testing, and security reviews to identify and address potential security weaknesses and threats.
• Review system configurations, software applications, and data management processes to ensure integrity, availability, and confidentiality of information assets.
• Prepare audit reports documenting findings, recommendations, and corrective actions to mitigate identified risks and strengthen the control environment.

Build team and people capabilities through:

• Providing real-time, ongoing coaching and feedback to team members throughout the year
• On-time completion of performance management activities including regular 1:1s and Bi-annual performance reviews through GPS.
• Supporting employee development including facilitation of career development conversations and crafting development plans for current and future needs
• Taking action to hire and retain high-performers and address poor performance.
• Proactively manage change initiatives within the team including sufficient planning/ preparation and communication to minimize disruption and support employee adoption.
• Role modelling the behaviors' that support and drive the Flash culture and values.

Requirements

MINIMUM REQUIREMENTS:

• Bachelor's degree in information systems, computer science, cybersecurity, or related field.
• 10+ years of experience in information systems auditing, IT security, or cybersecurity, preferably in the financial services industry.
• Professional certification such as CISA, CISSP, or CISM.
• Proficiency in conducting technical audits, vulnerability assessments, and penetration testing.
• Strong understanding of information security principles, technologies, and best practices.