ISO 27001 Lead Auditors

Job summary

Lead and conduct ISO 27001 certification, surveillance, and recertification audits, including reviewing client documentation and risk assessments. Prepare audit reports, communicate findings, respond to corrective actions, and maintain impartiality and confidentiality.

Job details

We are looking for ISO 27001 Lead Auditors to join our team! CSC is an ISO 17021-1 accredited certification body for both ISO 27001 as well as CyberSecure Canada Certification. Responsibilities: Lead and conduct ISO 27001 certification, surveillance, and recertification audits Review client documentation and risk assessments Prepare audit reports and communicate findings Review and respond to corrective actions Maintain impartiality and confidentiality per ISO/IEC 17021-1 Qualifications Practical workplace experience in information technology and information security ISO/IEC 27001:2022 Lead Auditor certification Minimum 10 ISMS on-site audit days within the last 5 years, including document review, risk assessment review, and audit reporting Experience as an auditor-in-training supervised by an ISMS evaluator on at least one initial certification (Stage 1 + 2) or recertification audit, plus one surveillance audit For lead auditor role: active participation in all stages (scoping, document review, risk assessment review, formal reporting) of at least 3 ISMS audits Up-to-date CPD records in information security and auditing A log or documented evidence demonstrating the above qualifications, including supervised/witnessed audit days, certification details, and CPD activity, must be submitted for competence verification.

What you’ll do

Lead and conduct ISO 27001 certification, surveillance, and recertification audits, including reviewing client documentation and risk assessments. Prepare audit reports, communicate findings, respond to corrective actions, and maintain impartiality and confidentiality.

Requirements

Candidates must have practical experience in IT and information security, ISO/IEC 27001:2022 Lead Auditor certification, and at least 10 ISMS on-site audit days within the past five years. Lead auditor candidates must also meet specified supervised audit and participation requirements, maintain current CPD records, and submit documented evidence for competence verification.

Listed skills

• Audit · Preferred
• Client · Preferred
• Documentation · Preferred
• assessment · Preferred
• Reporting · Preferred
• Training · Preferred
• Organization · Preferred
• Attention to detail · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• ISO 27001 Auditing
• Information Security
• Information Technology
• ISMS Auditing
• Certification Audits
• Surveillance Audits
• Recertification Audits
• Risk Assessment
• Document Review
• Audit Reporting
• Corrective Actions
• Impartiality
• Confidentiality
• Continuing Professional Development

Job areas

• Security & Safety
• Technology
• Consulting