ISO 27001 Lead Auditor

Company Description

Glocert International is a fast-growing leader in the Testing, Inspection, and Certification (TIC) industry. Accredited by IAS (USA), we provide certification and training services for various ISO standards, assuring high-quality and industry-specified standards. Our services extend to ESG, GHG, and Sustainability reporting, alongside third-party inspections for PCI-DSS, HIPAA, GDPR, HITRUST, and more. We are a Recognised Training Provider with Exemplar Global (USA), offering ISO lead auditor and lead implementer training. Additionally, our expertise includes third-party testing procedures such as VAPT, phishing exercises, red team exercises, and penetration testing.

Role Description

This is a full-time, on-site role for an ISO 27001 Lead Auditor based in Coimbatore. The Lead Auditor will conduct ISO 27001 audits, ensuring compliance with relevant standards and industry best practices. Responsibilities include planning, performing, and reporting on audits, preparing audit documentation, and supporting clients to meet information security management requirements. The role also involves attending meetings and staying updated on changes in regulations and industry trends.

Key Responsibilities

Audit Planning & Execution

• Conduct ISO/IEC 27001:2022 Stage 1 and Stage 2 audits independently.
• Perform surveillance and recertification audits as per the audit program.
• Review ISMS scope, policies, risk assessments, SoA, controls, and evidence.
• Prepare audit plans, checklists, sampling strategies, and audit trails.
• Assess effectiveness of controls aligned to Annex A and client-specific risk context.

Audit Reporting & Certification Support

• Prepare clear, accurate, and objective audit reports as per ISO/IEC 17021-1 clause 9.4.
• Document NCRs, OFIs, observations, and verify corrective actions.
• Ensure impartiality, independence, and compliance with accreditation requirements.
• Coordinate with certification decision makers for complete audit packages.

Client Interaction

• Conduct opening and closing meetings with senior management.
• Communicate audit findings professionally and constructively.
• Provide guidance (non-consulting) on understanding NCRs and next steps.

Continuous Improvement

• Participate in auditor calibration sessions and competence evaluations.
• Stay updated with ISO/IEC 27001:2022, 27002:2022, 27006-1:2024 and emerging cyber trends.
• Contribute to internal quality improvement initiatives.

Required Qualifications & Experience

• ISO/IEC 27001 Lead Auditor Certification (IRCA/Exemplar Global/PECB or equivalent).
• Minimum

  3+ years of auditing experience

  OR

  5+ full ISMS audits

  as lead.
• Strong knowledge of ISO/IEC 27002:2022, 27005, and ISMS risk methodologies.
• Experience auditing medium to large IT, SaaS, cloud, manufacturing, or BFSI organizations.
• Familiarity with regulatory frameworks (DPDP, SEBI CSCRF, GDPR, HIPAA) is an advantage.
• Excellent written and verbal communication skills.
• Ability to travel within India / GCC as required.

Preferred Skills (Nice to Have)

• Additional auditor qualifications: ISO 27701, ISO 22301, ISO 20000-1, ISO 42001.
• Exposure to SOC 2 / NIST CSF / CIS Controls.
• Technical understanding of cloud platforms (AWS, Azure, GCP).
• VAPT / cybersecurity background is a plus.

What We Offer

• Opportunity to work with a globally accredited certification body.
• Exposure to cybersecurity, privacy, and AI assurance domains.
• Competitive compensation + audit day rates for contract auditors.
• Continuous professional development and international audit opportunities.