Lead Auditor

Role & responsibilities

1.Conduct audits and assessments of the organization's information security management system to ensure compliance with ISO 27001 standards and best practices.

2. Collaborate with the GRC team to identify risks and vulnerabilities and develop and implement strategies to mitigate them.

3. Develop and maintain policies, procedures, and documentation related to the organization's ISMS.

4. Provide guidance and support to other teams within the organization on information security matters.

5. Monitor and report on the effectiveness of the organization's ISMS and identify areas for improvement.

6. Maintain knowledge of industry trends and best practices related to information security and regulatory compliance.

7. Provide training and awareness-raising activities for employees on information security and compliance matters.

Preferred candidate profile

1.Bachelor's degree in computer science, information security, or a related field.

2. ISO 27001 Lead Auditor L2 certification or equivalent

3. Should ka profound knowledge on SOC 2 Audit

4.Experience working in a regulated industry such as healthcare, finance, or government.

5. Familiarity with other relevant standards and regulations, such as GDPR, HIPAA, or PCIDSS.

6.Experience with GRC tools and software.

7. Certification in related fields such as CISM, CISSP, or CRISC