Company Description AuditPartners™ is a full-stack AI audit and risk consulting firm focused on helping organizations succeed in the AI era. The firm supports a wide range of frameworks, including ISO 27001, ISO 42001, SOC 2, SOX ITGC, CMMC 2.0, NIST AI RMF, and HIPAA/HITRUST. AuditPartners helps clients assess risk, build governance programs, and demonstrate audit readiness across AI governance, information security, and compliance. Services include AI governance and risk, ISO audits and compliance, IT audit and ITGCs, penetration testing, IT policy development, and gap assessments with scored maturity reports. Clients benefit from a single partner and unified control map and evidence strategy across SOX, ISO, CMMC, and AI governance frameworks.
Role Description The ISO 27001 Lead Auditor will perform third-party certification audits for clients seeking ISO 27001 compliance, with a focus on work within an accredited certification body context. This contract role is fully remote and involves planning, executing, and reporting on ISO 27001 audits, including document reviews, interviews with key stakeholders, and evaluation of implemented controls. Day-to-day responsibilities include preparing audit plans, assessing Information Security Management Systems (ISMS), documenting nonconformities, and providing clear, objective audit findings in accordance with ISO and certification body requirements. The auditor will collaborate with audit coordinators and technical experts, maintain up-to-date knowledge of related frameworks (such as ISO 27701, SOC 2, and NIST), and ensure high professional and ethical standards throughout the engagement.
Qualifications
- Demonstrated experience as an ISO 27001 Lead Auditor, including direct work with an accredited certification body and leading stage 1 and stage 2 audits.
- Strong knowledge of information security and risk management frameworks (e.g., ISO 27001/27701, SOC 2, NIST CSF, CMMC, HIPAA/HITRUST) and practical experience assessing controls.
- Proficiency in audit planning, evidence evaluation, reporting, and nonconformity management, with the ability to provide clear, well-structured audit documentation.
- Excellent analytical, interviewing, and communication skills, with the ability to explain complex security and compliance issues to technical and non-technical stakeholders.
- Relevant certifications such as ISO 27001 Lead Auditor, CISA, CISSP, or similar credentials, and experience working remotely with distributed teams.
- Bachelor’s degree in information security, information systems, computer science, or a related field, or equivalent professional experience.
- High level of professional integrity, independence, and attention to detail, with the ability to manage multiple client engagements on a contract basis