Information Security Auditor – Assurance (Associate)

About the role

Join PwC’s Risk Assurance – Digital Audit team as an Information Security Auditor. You will support clients in managing IT and broader business risks through audits, assessments, and compliance reviews across multiple industries.

Key responsibilities

• Assist in planning and executing information security audit projects within internal and external financial audits.
• Evaluate information security controls, identify and assess IT risks, and recommend remediation actions.
• Understand business processes and the impact of security controls on operations.
• Attend client meetings, gather evidence, and apply critical thinking to reach audit conclusions.
• Prepare audit deliverables and present findings to clients.

Required profile

• University degree in Information Technology, Computer Science, Information Security, MIS or a related field (Master’s degree is a plus).
• 0‑3 years of relevant experience.
• Knowledge of IT internal‑control frameworks such as COBIT, ISO 27001, ITIL and NIST.
• Willingness to obtain CISA certification within the first year if not already certified.
• Strong verbal and written communication skills in English.

Required skills

• COBIT
• ISO 27001
• ITIL
• NIST
• SOC 1 and SOC 2
• ISAE 3000 / ISAE 3402
• EBA, ESMA, EIOPA regulatory frameworks
• NIS2, DORA
• CISA (certification or willingness to obtain)

What we offer

• Competitive remuneration package with a 13th salary.
• Provident fund, medical and life insurance.
• Ongoing development, accelerated career paths and study assistance for professional qualifications.
• Inclusive culture of innovation and global mobility opportunities.
• Access to cutting‑edge technology such as ChatPwC, an AI‑powered assistant.