ISO 27001 Lead Auditor

Role: Associate Security Consultant – ISO & NIST

Location: Bangalore

Experience: 5 to 8 years

Skillset:

Certification:

Key Responsibilities:

· Lead and execute ISO 27001 implementation and audit projects, including risk assessments, gap analysis, and compliance checks.

· Drive the implementation of NIST cybersecurity frameworks (e.g., NIST CSF, 800-53, 800-171) for clients across industries.

· Provide strategic guidance on security best practices, governance, risk, and compliance (GRC) initiatives.

· Perform internal audits and prepare clients for certification audits in alignment with ISO standards.

· Create and maintain Information Security Management System (ISMS) documentation and support continual improvement processes.

· Collaborate with cross-functional teams and manage end-to-end client engagements.

· Mentor and lead a team of junior consultants; review deliverables and ensure timely project delivery.

· Conduct security awareness sessions, training, and workshops for clients and internal stakeholders.

· Stay updated on evolving threats, industry standards, and compliance regulations.

· Should be open to travel and work at client premises as and when required by project or business demands is essential.

Requirements:

· 5 to 8 years of professional experience in Information Security consulting.

· Proven experience with ISO 27001 implementation & auditing.

· Experience in NIST framework implementation and controls assessment.

· Experience in auditing cloud environments across platforms such as AWS, Azure, or Google Cloud.

· Strong understanding of GRC practices and cybersecurity principles.

· ISO 27001:2013/2022 Lead Auditor Certification is mandatory.

· Prior team management or leadership experience is required.

· Excellent communication, documentation, and presentation skills.

· Ability to work independently and manage multiple client engagements.

· Exposure to other frameworks and standards like SOC 2, HIPAA, GDPR, PCI DSS is a plus.

· Experience working with clients from BFSI, IT/ITES, or Healthcare sectors.

· Additional certifications such as CISA, CISM, or CISSP are advantageous