Job Description – Lead Auditor ISO 27001 (Freelance)
📋 POSITION
Lead Auditor ISO 27001 – Freelance (Slovenia-Based)
🎯 OVERVIEW
We are seeking an experienced and autonomous Lead Auditor ISO 27001 to support information security audit activities with clients in Slovenia and potentially across the wider geographic region. This is a freelance, call-based position with interventions scheduled according to agreed planning. Ideal for a seasoned professional with consolidated experience, operational flexibility, and the ability to manage complex audits independently.
📌 KEY RESPONSIBILITIES
Conduct ISO 27001 audits: Plan, execute, and report on information security compliance audits at client organizations
ISMS assessment: Verify implementation and effectiveness of Information Security Management Systems
Non-conformities and recommendations: Identify gaps, prepare detailed reports, and suggest improvement measures
Stakeholder communication: Pre-audit briefings, exit meetings, and results discussion with management and IT/Security teams
Documentation:Completion of checklists, evidence gathering, photography, and audit documentation per international standards
Operational flexibility: Availability for scheduled interventions and, if necessary, short-notice assignments according to planning requirements
👤 REQUIRED PROFILE
Experience and Certifications (Mandatory)
Lead Auditor ISO 27001 certification (IRCA, PECB, Exemplar Global, or equivalent recognized body)
Minimum 3 years of experience in ISO 27001 audits or ISMS
Experience conducting audits in Slovenian organizations (or familiarity with Slovenian/EU regulatory context)
Strong knowledge of ISMS, risk management, compliance, and information security governance
Technical Competencies
Deep knowledge of ISO/IEC 27001:2022 (and previous versions)
Familiarity with NIST Cybersecurity Framework, ISO 27002, ISO 27035 (incident management)
Experience with audit methodologies (sampling, evidence gathering, risk-based approach)
Ability to assess technical and organizational ISMS controls
Basic knowledge of IT environments, cloud infrastructures, data protection (GDPR)
Soft Skills
Autonomy and reliability: Ability to manage audits independently without constant supervision
Communication:Skill in presenting complex findings clearly to different management levels
Flexibility:Availability for scheduled interventions with short notice
Problem-solving:Capacity to adapt to heterogeneous organizational contexts
Professional integrity: Impartiality and confidentiality compliance
Language Requirements
Slovenian:Fluent (spoken and written) – Essential
English:Good level (for technical documentation and international communication)
Originally posted on Himalayas