ISMS and Compliance Consultant

Responsibilities

• Manage the ISO/IEC 27001:2022 ISMS: Oversee operations across seven global locations, maintaining risk registers, Statements of Applicability, documentation workflows, review schedules, and central portal records.
• Direct remediation workflows: Log, monitor, follow up, confirm, and resolve non-conformities end to end, conducting unbiased validation for external tasks.
• Coordinate audit operations: Organize internal review schedules, recertification assessments, documentation packages, and auditor engagement through full resolution.
• Drive security awareness: Deploy training modules and phishing exercises company-wide while providing detailed completion metrics.
• Manage third-party risk: Conduct vendor assessments, establish risk scores, complete periodic reviews, and handle contractual security obligations.
• Maintain proposal assets: Author responses for client security evaluations and continuously update our centralized knowledge repository.
• Spearhead compliance growth: Guide readiness efforts for ISO/IEC 42001, followed by ISO 9001 and SOC 2, addressing gaps and handling evidence compilation.
• Advise executive leadership: Present monthly metrics, risk evaluations, and overall compliance progress directly to executive management teams.

Requirements

• 5+ years in information security governance, risk and compliance
• Practical ISMS management experience, including active execution of ISO/IEC 27001 surveillance or recertification audits.
• Proven track record in evidence governance, including rigorous record-keeping, version control, and end-to-end traceability
• Demonstrated expertise navigating cross-border regulatory environments across multiple global territories, particularly within Australia, the UK, the US, and India.
• Exceptional written communication skills for creating clear, professional auditor- and client-facing documentation
• Ability to maintain consistent schedule alignment with Australian working hours (AEST operates 4.5 to 5.5 hours ahead of IST for all routine reviews and team cadences).

Nice to Have

• ISO/IEC 42001 AI governance: Familiarity with emerging AI management frameworks, supporting our upcoming certification initiatives.
• Compliance framework background: Hands-on exposure to SOC 2 or ISO 9001 quality management standards.
• Security operations tools oversight: Functional knowledge of SIEM, DLP, and EDR solutions to define and validate baseline controls.
• Consulting background: Prior experience in client-facing or professional services environments subject to external review.
• Google Workspace administration: Practical familiarity operating within enterprise Google Cloud ecosystem environments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.