© 2023 Cyber Command Pvt Ltd
We're looking for a ISO 27001 Lead Implementer to Join the team.
Know MoreWe're looking for a ISO 27001 Lead Implementer to Join the team.
Know MoreWho we need
We are seeking an experienced ISO 27001 Lead Implementation Consultant to join our team.
The candidate must have hands-on experience in ISO 27001:2022 implementation and ISMS operationalization.Must be proficient in gap assessments, risk management, control implementation, and audit readiness.Experience with TISAX, manufacturing environments, and certification audits is an added advantage.The ideal candidate should have strong project management and stakeholder coordination skills.
Essential qualities:
Job Title: ISO: ISO Implementation Lead consultant
Job Location: Remote, India
Duration: 6–12+ Months
Education Qualification: Btech or Mtech in computer science or realted fields
Compentation : Competitive Pay
Desired Experience:
As an ISO 27001 Implementation Lead Consultant at CyberCommand, your primary responsibility will be to lead and coordinate the implementation, operationalization, and certification readiness of an existing Information Security Management System (ISMS). You will work with client stakeholders to validate existing documentation, identify and prioritize implementation gaps, coordinate security control implementation, and establish the evidence required for successful certification.
The ideal candidate should have strong project management and stakeholder coordination skills, with the ability to drive ISO 27001 implementation across multiple business functions and sites while building on existing processes and documentation.
Key Responsibilities:
Contract
Job Location: Remote, India
Duration: 6–12+ Months
Education Qualification: Btech or Mtech in computer science or realted fields
Compentation : Competitive Pay
Desired Experience:
- 7–10 years of experience in ISO 27001 implementation, ISMS operationalization, and certification readiness.
- Strong understanding of ISO/IEC 27001:2022 requirements, Annex A controls, information security risk assessments, and risk treatment.
- Hands-on experience preparing and maintaining the Statement of Applicability (SoA), risk registers, policies, procedures, and audit evidence.
- Proven experience coordinating internal audits, management reviews, corrective actions, and Stage 1 and Stage 2 certification audits.
- Experience working with cross-functional teams, including IT, cybersecurity, infrastructure, manufacturing, ERP, procurement, and business operations.
- Knowledge of TISAX, IT General Controls (ITGC), SOX, supplier security, asset management, and physical security will be an advantage.
- ISO 27001 Lead Implementer certification is preferred. Lead Auditor certification is an added advantage.
As an ISO 27001 Implementation Lead Consultant at CyberCommand, your primary responsibility will be to lead and coordinate the implementation, operationalization, and certification readiness of an existing Information Security Management System (ISMS). You will work with client stakeholders to validate existing documentation, identify and prioritize implementation gaps, coordinate security control implementation, and establish the evidence required for successful certification.
The ideal candidate should have strong project management and stakeholder coordination skills, with the ability to drive ISO 27001 implementation across multiple business functions and sites while building on existing processes and documentation.
Key Responsibilities:
- Review the existing ISO 27001 implementation plan, define workstreams, establish milestones, assign responsibilities, and track progress against agreed timelines.
- Conduct gap assessments against ISO 27001:2022 requirements and applicable Annex A controls, leveraging existing TISAX assessments and evidence wherever possible.
- Maintain a consolidated gap assessment and remediation tracker, including risk priorities, accountable owners, target dates, closure criteria, and verification evidence.
- Review and operationalize the existing information security risk assessment methodology, risk register, risk treatment plan, and Statement of Applicability (SoA).
- Review and improve existing information security policies, procedures, standards, and documentation rather than recreating documents unnecessarily.
- Coordinate security control implementation across IT infrastructure, cybersecurity, identity and access management, ERP, plant systems, vendors, physical security, mobile IT, and business processes.
- Prioritize asset inventory and CMDB ownership, access governance, third-party security, physical protection, and repeatable evidence collection.
- Coordinate ISO 27001 awareness and training, internal audits, management reviews, corrective actions, and verification of control effectiveness.
- Integrate relevant evidence from TISAX, ITGC, SOX, IATF, penetration testing, resilience activities, and other applicable assurance programs.
- Coordinate certification-body selection, readiness reviews, Stage 1 and Stage 2 certification audits, auditor requests, stakeholder interviews, and corrective-action closure.
- Collaborate with IT, cybersecurity, Facilities, HR, Privacy, Legal, Procurement, manufacturing, and business teams to ensure effective implementation and clear ownership of security controls.
- Prepare regular implementation status reports covering milestones, risks, outstanding gaps, dependencies, and decisions required from management.
Contract
