ISO 27001 : 2022 Internal Auditor

Job Description

This is a remote position.

The ISO 27001 Internal Auditor is responsible for planning, conducting, and reporting on internal audits of an organization’s Information Security Management System (ISMS) to ensure compliance with the ISO 27001 standard. This role is crucial for identifying vulnerabilities, recommending improvements, and supporting the continuous enhancement of information security practices within the organization

Requirements

Key Responsibilities

• Conduct Internal Audits :   Plan and execute audits of the ISMS, including reviewing documentation, interviewing staff, and observing processes to assess compliance with ISO 27001 requirements.
• Identify Security Risks and Gaps :   Detect vulnerabilities, non-conformities, and areas where improvements are needed in the organization’s information security practices.
• Prepare Audit Reports :   Document findings, including identified risks, weaknesses, and recommendations for corrective actions.
• Recommend Corrective Actions :   Provide actionable recommendations to address deficiencies and enhance the effectiveness of the ISMS.
• Monitor Progress :   Track the implementation of corrective actions and conduct follow-up audits to verify their effectiveness.
• Ensure Continuous Improvement :   Support ongoing improvements to information security controls and processes.
• Communicate Findings :   Clearly communicate audit results and recommendations to management and relevant stakeholders.

Skills and Competencies

Qualifications

Requirements

Candidate will be accountable for : Set up IT infrastructure foundation from scratch Managing and maintenance of Servers, virtual machines on both on premises and cloud (AWS and Azure) Security, performance and Networks Implementation of regulatory frameworks