ISO 27001:2022 Lead Auditor

Job Overview

We are seeking a highly skilled and certified ISO 27001:2022 Lead Auditor to join our team. In this role, you will be responsible for leading internal and external audits of our Information Security Management System (ISMS) to ensure full compliance with the latest ISO 27001:2022 standards. You will play a critical role in identifying risks, ensuring data integrity, and driving continuous improvement across the organization.

Requirements

• Certification: Mandatory: Valid ISO/IEC 27001:2022 Lead Auditor certification (e.g., PECB, BSI, IRCA).

• Experience: Proven experience leading ISO 27001 audits (transition experience from 2013 to 2022 version is highly desirable).

• Knowledge: Deep understanding of information security principles, risk management, and the specific changes introduced in the 2022 standard (e.g., new control sets in Annex A).

• Standards: Strong working knowledge of ISO 19011 (Auditing Management Systems) and ISO 27002.

• Skills: Excellent analytical, communication, and report-writing skills. Ability to handle sensitive information with integrity.

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field is preferred.

Responsibilities

• Lead Audits: Plan, conduct, and lead comprehensive internal and external ISMS audits in accordance with ISO 19011 and ISO 27001:2022 requirements.

• Compliance Verification: Evaluate the effectiveness of the organization's security controls, risk management processes, and documentation.

• Reporting: Prepare detailed audit reports, presenting findings, non-conformities, and opportunities for improvement to senior management.

• Certification Support: Act as the primary liaison during external certification audits (Stage 1 and Stage 2) and surveillance audits.

• Risk Assessment: Assist in identifying information security risks and verifying that appropriate mitigation strategies (Annex A controls) are implemented.

• Training & Awareness: Provide guidance and training to internal teams on ISO 27001:2022 updates and best practices.