Associate's degree or higher (or equivalent certification or demonstrated work experience)
Must have Internal or external auditing experience
Minimum of 4 years of practical experience in information technology, with at least 2 years focused on information security roles
Experience in implementing or consulting on Information Security Management Systems (ISMS) is a strong advantage
Preferred certifications include ISO/IEC 27001 Internal or Lead Auditor, CISA, CISSP, CISM, and CRISC
Responsibilities
Manage a portfolio of assigned clients by geographic location and contract requirements
Oversee full lifecycle of audit engagements, from client contracting to reporting results
Maintain accurate client account records within BSI systems for invoicing and client satisfaction
Lead audit teams, providing mentorship and collaboration to less experienced team members
Ensure audit services comply with BSI and regulatory standards and meet client expectations
Benefits
Hybrid position allowing primarily remote work with high travel availability
Opportunities for professional growth and development within the auditing field
Access to training and support for preferred certifications and continued education
Full Job Description
Deliver BSI's audit services to assigned clients in compliance with BSI, scheme, and regulatory requirements
Ensure timely and cost-effective audit execution that meets client expectations and needs
Conduct various types of audits, serving as either a Team Leader or a Team Member
Support customer satisfaction through high-quality audit delivery
Apply expertise in ISO 27001 - Information Security, ideally with third-party audit experience
Key Responsibilities & Accountabilities:
Manage a portfolio of assigned clients, aligned by geographic location, qualifications, and specific contract requirements.
Oversee the full lifecycle of audit engagements, including client contracting, scheduling, audit planning, travel coordination, on-site or remote assessment delivery, and results reporting.
Monitor and maintain accurate client account records within BSI systems such as Point Global, ensuring timely visit cycles, invoicing accuracy, and sustained client satisfaction.
Lead audit teams when required, fostering collaboration and providing mentorship and coaching to less experienced or new team members.
Skills & Abilities:
Audit & Industry Knowledge: Solid understanding of management system auditing practices, including ISO standards and regulatory frameworks. Familiarity with client-specific products, processes, organizational structures, previous audit outcomes, and team competency requirements.
Technical Proficiency: Proficient in Microsoft Office and general business technologies, documentation systems, and information systems relevant to audit preparation and reporting.
Qualification & Experience:
Associate's degree or higher (or equivalent certification or demonstrated work experience)
Must have Internal or external auditing experience.
Minimum of 4 years of practical experience in information technology, with at least 2 years specifically focused on information security roles or functions
Experience in implementing or consulting on Information Security Management Systems (ISMS), or participating in internal (first party) or external (third-party) ISMS audits, is not required but considered a strong advantage
Preferred Certifications: ISO/IEC 27001 Internal or Lead Auditor, CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control).
Travel requirements:
This is a hybrid position with a primary focus on remote work; however, high travel availability is required.
