Information Security Auditor (Remote, South Africa)

About the role

Cognisys is seeking a client‑facing GRC Auditor to join its growing audit practice. The role involves planning and executing security and governance audits for organisations across multiple industries, helping them achieve certification and improve their security posture.

Key responsibilities

• Lead and support audit engagements for a variety of clients and sectors.
• Plan, conduct and document audits against recognised management‑system and security frameworks.
• Evaluate control design and effectiveness through document review, sampling and stakeholder interviews.
• Gather, validate and record audit evidence in line with established methodologies.
• Identify non‑conformities, observations and opportunities for improvement.
• Prepare clear, structured audit reports with actionable findings.

Required profile

• Strong foundational knowledge of audit principles and security management frameworks.
• Practical experience conducting audits or assessments in a GRC context.
• Detail‑oriented, able to work independently and manage multiple engagements.
• Excellent communication skills for interacting with clients and internal teams.

Required skills

What we offer

• Competitive salary range (R400,000 – R650,000 per year).
• Opportunity to work remotely from anywhere in South Africa.
• Exposure to a diverse client base across more than 30 countries.
• Access to modern audit tools and a forward‑thinking team environment.