Role : ISO Lead Auditor

Qualifications and Requirements:

• ISO 27001 Lead Auditor Certification – Required.
• ISO 22301 Lead Auditor Certification – Preferred (Must obtain)
• 2+ years working in the auditing (external or internal) management systems certification/conformity assessment, ideally with certification body accreditation responsibilities.
• Detailed working knowledge of ISO-27001, ISO-27017, ISO-27018, ISO-27701, (Ideally ISO-22301)
• Good working knowledge of the requirements of ISO 17021
• Excellent communication, decision-making, and problem-solving skills
• Should be flexible to meet with customers in their preferred time zone
• Collaborative mindset
• Professionals 4+ years of experience in Information Security
• We support fully remote work arrangements as well as hybrid in-office/WFH formats.
• Travel to domestic / International client sites may be required.

Job Description:

The ISO Auditor is responsible for conducting ISO-27001, ISO-27017, ISO-27018, ISO-27701 and ISO-22301 audits and client deliverables. This includes planning, fieldwork, wrap-up, and preparation of audit reports for multiple clients and engagements globally. Clients include a diverse high-tech startups and established market leaders globally especially in the U.S., European and APAC markets.

Responsibilities:

Independently conduct ISO-27001, ISO-27017, ISO-27018, ISO-27701 and ISO-22301 certification audits to minimize risk and surprises, optimize engagement economics, satisfy service objectives, and meet internal and external deadlines. Deliver all ISO audits including initial certifications, surveillance, and recertifications in accordance with established methodology and standards. Collect and analyze complex data, evaluate systems and their related controls, and draw logical conclusions in conformity with standards. Provide timely updates to supervisors regarding engagement progress and to proactively address any issues. Assist in maintaining the Firm’s accreditation to multiple accrediting bodies to the ISO17021 standard, ensuring no accreditation risk.