IT Security Auditor
An experienced IT Security Auditor is sought to assess, strengthen and improve information security controls across a complex technology environment. This role will provide independent assurance that systems, processes and controls are designed and operating effectively, while helping to identify opportunities to reduce cyber risk and support regulatory compliance.
Key responsibilities will include planning and delivering risk-based IT and information security audits, reviewing access controls, infrastructure, cloud services, applications, networks, data protection and third-party arrangements. You will conduct interviews, examine documentation, analyse technical evidence and test controls against recognised frameworks and applicable legislation. The role will also involve evaluating incident management, vulnerability management, change control, business continuity and disaster recovery arrangements.
You will prepare clear, well-evidenced audit reports, highlighting control weaknesses, root causes, risk implications and practical recommendations. Working with control owners and senior stakeholders, you will agree remediation plans, monitor progress and validate completed actions. You may also contribute to risk assessments, policy reviews, security projects and continuous improvement initiatives, providing constructive challenge while maintaining effective working relationships across technical and non-technical teams.
Applicants should have proven experience in IT audit, information security, cyber risk or a closely related discipline, together with a sound understanding of security principles, governance and control frameworks. Familiarity with standards such as ISO 27001, COBIT, NIST or CIS Controls is desirable, as is experience auditing cloud environments and suppliers. A relevant professional qualification, such as CISA, CISSP, CISM or equivalent experience, would be advantageous.
You will need strong analytical and report-writing skills, excellent attention to detail and the confidence to communicate findings clearly at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining independence, professional judgement and confidentiality.
IT Security Auditor
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor