Lead Auditor

Key responsibilities :

• Develop and implement comprehensive audit plans aligned with organisational risk assessments and relevant standards.
• Conduct audits of clients' Information Security Management System (ISMS) based on ISO 27001, NIST, and other applicable standards to assess compliance and identify areas for continual improvement.
• Conduct independent and objective assessments of the ISMS, evaluating the design, implementation, and effectiveness of information security controls.
• Identify vulnerabilities, control weaknesses, and non-compliance issues through interviews, document reviews, testing procedures, and other established audit methodologies.
• Identify and assess the organisation's information security risks and develop audit reports detailing findings, recommendations, and corrective actions with recommended mitigation measures.
• Collaborate with stakeholders across various departments (IT, HR, Legal, etc.) to implement corrective actions effectively.
• Collaborate effectively with diverse client stakeholders to ensure alignment with Information Security Management policies, procedures, guidelines, and processes.
• Responsible for creating ISMS-related Documents / Checklists / Policies / SOPs, conducting ISMS Audits, and driving ISMS-related activities throughout all the locations.
• Support the organisation / clients in achieving and maintaining ISO 27001 certification.
• Designed policy framework based on ISO 27001, opening and closing of an audit meeting, and assisted with follow-up audits.
• Review and update ISMS audit methodologies and tools based on emerging threats, best practices, and organisational changes.
• Adhere to strict ethical standards and organizational information security policies when handling sensitive data obtained during the audit process.

Key skills / knowledge / experience : (Up to 10, Avoid repetition)

Skills Required

Soc