ISO Lead Auditor

Accountabilities

In this role, you will lead audit engagements, ensure compliance with international standards, and contribute to the continuous improvement of audit practices. Your main responsibilities will include:

Lead and conduct audits covering ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 9001, and ISO 22301.

Manage the full audit lifecycle, including engagement planning, fieldwork, audit completion, and preparation of detailed reports.

Coordinate multiple client engagements across different industries and geographical regions.

Prepare, review, and submit accurate and comprehensive ISO compliance reports within established timelines.

Support clients in implementing and managing compliance activities through Governance, Risk, and Compliance (GRC) platforms.

Help improve automated evidence collection processes and the overall efficiency of compliance management.

Contribute to the development and refinement of audit methodologies, internal processes, and best practices.

Participate in peer quality assurance reviews to maintain consistent audit standards.

Support additional compliance assessments involving PCI DSS, HITRUST, FedRAMP, and other relevant frameworks when required.

Collaborate with internal teams and clients to ensure successful delivery of audit engagements.

Requirements:

The ideal candidate combines strong technical knowledge of information security standards with proven auditing experience and excellent client-facing skills. The following qualifications are expected:

ISO 27001 Lead Auditor certification is required.

Bachelor's degree in a technical or business-related field; a master's degree is preferred.

At least 4 years of experience in auditing, including internal or external management system audits, certification, or conformity assessment activities.

Experience working with certification bodies and accreditation-related responsibilities is highly desirable.

At least 4 years of professional experience in information security.

Detailed working knowledge of ISO 27001, ISO 27017, ISO 27018, ISO 27701, and ISO 9001 standards.

Good understanding of ISO 17021 requirements.

CISA certification or other relevant professional credentials is preferred.

Strong communication, decision-making, analytical, and problem-solving skills.

Ability to manage multiple audit engagements while maintaining accuracy and attention to detail.

Flexibility to accommodate clients across different time zones.

Collaborative mindset and ability to work effectively with clients and cross-functional teams.

Willingness to travel domestically and internationally to client sites when required.

Benefits:

Full-time, remote working arrangement in India.

Opportunity to work with international clients across multiple industries.

Exposure to a broad range of cybersecurity, information security, and compliance frameworks.

Opportunities to expand expertise beyond ISO audits into PCI DSS, HITRUST, and FedRAMP assessments.

Collaborative working environment focused on accountability, continuous improvement, and professional development.

Mid-level position offering opportunities to contribute to evolving audit practices and methodologies.