ISO27001 Implementation Specialist

The Role

This role is hands on, focused on achieving the following:

Complete Stage 1, the framework for which is already just about ready

Own the Stage 2 readiness plan: gap registers, owners, dates and weekly status

Close gaps directly where they are documentation or configuration, and through control owners where they are operational

Make the ISMS understood and owned across IT, Security, Compliance, HR, Finance, Projects and Exports

Simplify and embed processes so evidence is see in day to day operations, not just on a checklist for the audit

Hand over a system the permanent team can sustain through surveillance audits

The Ideal Candidate

• We’re looking for the following in the successful candidate:
• Solid, progressive experience ISO 27001:2022
• ISO27001 Lead Implementer or Lead Auditor qualification
• Track record of getting non IT departments to own controls, with the credibility and patience to make it stick
• Hands on with a compliance platform (eg Drata, Vanta, Secureframe or similar)
• Enough Microsoft 265 and Entra ID surface understanding to have sensible conversations with the IT team
• Strong written English to delivery good quality
• If you have CISM, CISSP or CISA then great, but not essential

Additional Information

Salary is dependent upon experience.

This is working for a fantastic company who really value their staff.