ISMS Auditor - Digital Trust

We exist to create positive change for people and the planet. Join us and make a difference too!

Purpose of the position

- To conduct on-site assessments against the requirements of relevant standards or specifications

- To provide expertise, produce surveillance and initial assessment reports and make recommendations for certification decisions.

- To promote the BSI product offering and solutions to our clients with the view of improving their business performance, managing risk and“Inspiring trust for a more resilient world”

Key responsibilities & accountabilities

• Undertake management system assessments in accordance with BSI requirements.

• Prepare assessment reports and deliver findings to clients to ensure client understanding of the assessment decision and clear direction to particular items of corrective action where appropriate.

• Recommend the issue, re-issue or withdrawal of certificates, and report recommendations in accordance with BSI policy, procedures and prescribed time frame.

• Lead assessment teams as required ensuring that team members are adequately briefed so that quality of service is maintained and that effective working relationships are sustained both with Clients and within the team

• Establish and develop an effective partnership, which secures the commercial relationship and encourages opportunities for business development and increased client satisfaction with clients in your portfolio.

• Provide accurate and prompt information to support services, working closely with them to ensure that client records are up to date and complete and that all other internal information requirements are met.

• Plan/schedule workloads to make best use of own time and maximise revenue-earning activity.

• Coach colleagues as appropriate especially where those members are inexperienced assessors or unfamiliar with clients' business/technology and assist in the induction and coaching of new colleagues as requested.

• Maintain and develop assessment skills and technical and management system standards knowledge.

• Provide technical support to clients through business development, sales and customer service staff

• Act as a brand Ambassador for BSI. This means acting ethically, following company rules and promoting BSI services to clients so they are able to optimize business performance and “Inspiring trust for a more resilient world”.

Job Description

To conduct various types of audits to work closely with BSI clients to help them improve their performance by assessing their systems and processes against BSI standards

1) Prepare assessment reports and deliver findings to clients to ensure client understanding of the assessment decision and clear direction to particular items of corrective action where appropriate

2) Recommend the issue, re-issue or withdrawal of certificates, and report recommendations in accordance with BSI policy, procedures, and prescribed time frame.

3) Maintain overall account responsibility and accountability for nominated accounts to ensure an effective partnership, whilst ensuring excellent service delivery and account growth.

4) Lead assessment teams as required ensuring that team members are adequately briefed so that quality of service is maintained and that effective working relationships are sustained both with Clients and within the team.

5) Provide accurate and prompt information to support services, working closely with them to ensure that client records are up to date and complete and that all other internal information requirements are met.

6) Coach colleagues as appropriate especially where those members are inexperienced assessors or unfamiliar with clients' business/technology and assist in the induction and coaching of new colleagues as requested

7) Plan/schedule workloads to make best use of own time and maximize revenue-earning activity.

Qualification and Education

• Bachelor’s degree or higher in engineering, IT, information security, computer science, or related discipline.

• At least four years of full-time practical work experience in information technology, of which a minimum of two years must be in a role or function directly related to information security.

• Knowledge and experience in information security management systems, including:

• ISO/IEC 27001 (ISMS) – mandatory.

• Preferably experience with related standards and frameworks such as ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, and PCI DSS.

• Successful completion of at least a five-day ISMS auditor or lead auditor training course covering ISO/IEC 27001 audits and audit management.

About Us

BSI is a business improvement and standards company and for over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives.
 
Today BSI partners with more than 77,500 clients in 195 countries and engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments.
Utilizing its extensive expertise in key industry sectors - including automotive, aerospace, built environment, food and retail, and healthcare - BSI delivers on its purpose by helping its clients fulfil theirs.
Living by our core values of Client-Centricity, Agility, and Collaboration, BSI provides organizations with the confidence to grow by partnering with them to tackle society’s critical issues – from climate change to building trust in digital transformation and everything in between - to accelerate progress towards a better society and a sustainable world.

BSI is an Equal Opportunity Employer dedicated to fostering a diverse and inclusive workplace.