ISO 27001 Implementation Specialist - Interim

We are recruiting for an Interim Specialist to deliver an ISO 27001 programme. You will own it through to certification. Much of the Stage 1 work is done and LRQA passed, the job is to close some remaining gaps relating to Stage 1, land the management system with the people who run it, and have the evidence ready for Stage 2. This is a hands on delivery role, not an advisory one. You will have support from an established QA/Compliance function, senior management is behind this, and the company has a brilliant culture to operate within, one of the best. You will work inside the business with department heads and control owners, turning requirements into working practice. You can work remotely, visiting company sites when you need to. Southampton is the main site. We estimate the job will be 6-12 months. With the company growing as it is, there is the possibility it could morph into something else later.

The Role

This role is hands on, focused on achieving the following:

• Complete Stage 1, the framework for which is already just about ready
• Own the Stage 2 readiness plan: gap registers, owners, dates and weekly status
• Close gaps directly where they are documentation or configuration, and through control owners where they are operational
• Make the ISMS understood and owned across IT, Security, Compliance, HR, Finance, Projects and Exports
• Simplify and embed processes so evidence is see in day to day operations, not just on a checklist for the audit
• Hand over a system the permanent team can sustain through surveillance audits The Ideal Candidate We’re looking for the following in the successful candidate:
• Solid, progressive experience ISO 27001:2022
• ISO27001 Lead Implementer or Lead Auditor qualification
• Track record of getting non IT departments to own controls, with the credibility and patience to make it stick
• Hands on with a compliance platform (eg Drata, Vanta, Secureframe or similar)
• Enough Microsoft 265 and Entra ID surface understanding to have sensible conversations with the IT team
• Strong written English to deliver good quality policies and procedures that are an easy read
• If you have CISM, CISSP or CISA then great, but not essential In terms of personal attributes, it’s important you are methodical, calm and able to make decisions, work independently and take ownership. The team and company are super nice, so you need to be a decent, ethical person who works well in a team. Additional Information Salary is dependent upon experience. This is working for a fantastic company who really value their staff. Please note, due to the volume of applications we are not always able to contact each applicant individually. If you have not heard from us within 3 working days of application please assume that you have been unsuccessful on this occasion