This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are seeking a highly experienced Information Security Auditor & Standards Lead with deep, hands-on knowledge of global information security standards and best practices. The individual will independently lead security governance, audit, and compliance activities across frameworks such as ISO 27001 and SOC 2, and continuously enhance the organization’s security and compliance maturity.
Job Responsibility:
Act as Subject Matter Expert (SME) for ISO 27001, SOC 1 / SOC 2, NIST, and CIS frameworks
Interpret security standards and translate requirements into auditable controls
Ensure controls are designed, implemented, and maintained effectively
Provide guidance on mandatory requirements versus best practices
Plan and manage ISO 27001 and SOC audits end-to-end
Conduct internal audits and ongoing compliance assessments
Serve as primary point of contact for auditors and certification bodies
Track audit findings, non-conformities, and corrective actions to closure
Own and maintain the Information Security Management System (ISMS)
Maintain risk assessments, risk treatment plans, and Statement of Applicability (SoA)
Develop, review, and enforce security policies, standards, and procedures
Provide standards-driven guidance for new systems, applications, and infrastructure
Review new implementations for compliance alignment
Advise on control selection, design, and evidence requirements
Ensure new implementations are audit-ready by design
Provide compliance guidance to Security, Network, IT, Cloud, and HR teams
Identify gaps and drive continuous improvement initiatives
Support management reviews and executive-level reporting
Requirements:
5–8 years of experience in Information Security Auditing / GRC
Strong hands-on experience with ISO 27001 and SOC 1 / SOC 2 audits
Strong understanding of security principles and control frameworks