Qualifications and Requirements:
- ISO 27001 Lead Auditor designation – Required.
- ISO 22301 Lead Auditor designation – Preferred (Must obtain)
- CSA Star certifications, either – CCSK, or CCAK (Preferred)
- Bachelor’s Degree in Technical or Business area (master’s preferred)
- Professional Certifications such as Certified Information Systems Auditor (CISA) – Preferred
- 2+ years working in the auditing (external or internal) management systems certification/conformity assessment, ideally with certification body accreditation responsibilities.
- Detailed working knowledge of ISO-27001, ISO-27017, ISO-27018, ISO-27701, (Ideally ISO-22301)
- Good working knowledge of the requirements of ISO 17021
- Excellent communication, decision-making, and problem-solving skills
- Should be flexible to meet with customers in their preferred time zone
- Collaborative mindset
- Professionals 4+ years of experience in Information Security
- We support fully remote work arrangements as well as hybrid in-office/WFH formats.
- Travel to domestic / International client sites may be required.
Job Description:
The ISO Auditor is responsible for conducting ISO 27001/17/18/27701 and 22301 audits and client deliverables. This includes planning, fieldwork, wrap-up, and preparation of audit reports for multiple clients and engagements globally. Clients include a diverse high-tech startups and established market leaders globally especially in the U.S., European and APAC markets. Many are early technology companies building their products on different cloud infrastructures. Our Audit team works on multiple clients and engagements simultaneously, managing priorities to meet deadlines. This role reports to the ISO Global Manager and with constant interaction with the vertical head.
Responsibilities:
Independently conduct ISO 27001/17/18/27701 and 22301 certification audits to minimize risk and surprises, optimize engagement economics, satisfy service objectives, and meet internal and external deadlines. Deliver all ISO audits including initial certifications, surveillance, and recertifications in accordance with established methodology and standards. Collect and analyze complex data, evaluate systems and their related controls, and draw logical conclusions in conformity with standards. Provide timely updates to supervisors regarding engagement progress and to proactively address any issues. Assist in maintaining the Firm’s accreditation to multiple accrediting bodies to the ISO17021 standard, ensuring no accreditation risk.