ISO 27001 Auditor — Information Security & Compliance
Governance, Risk & Compliance (GRC) · Gurugram, India · On-site · Full-time · 1–3 years of relevant experience in ISO 27001 audits, ISMS implementation, or in
Invield is hiring an ISO 27001 Auditor with practical experience in information security audits, ISMS documentation, risk assessments, and compliance reviews. You will work with clients to assess their readiness against ISO/IEC 27001:2022, review control implementation, identify gaps, and track corrective actions. The role includes internal audits, readiness assessments, implementation support, and coordination during external certification audits. We are looking for someone who can interpret requirements, validate evidence, and communicate findings clearly. Candidates must have a sound understanding of IT and cybersecurity fundamentals, along with hands-on exposure to ISO 27001 engagements.
What you'll do
- Plan and conduct ISO/IEC 27001:2022 internal audits and gap assessments against agreed scope and criteria.
- Assess conformity with Clauses 4–10 and evaluate applicable Annex A controls.
- Review ISMS scope, policies, procedures, objectives, and supporting records.
- Evaluate risk assessments, risk treatment plans, and Statements of Applicability.
- Conduct stakeholder interviews and verify implementation through evidence sampling.
- Review controls covering access management, asset management, incident response, supplier security, business continuity, and other relevant areas.
- Prepare audit reports with clear findings, supporting evidence, and identified nonconformities.
- Review root-cause analysis, track corrective actions, and verify closure evidence.
- Support clients with ISMS documentation and implementation activities while maintaining audit objectivity and avoiding review of their own work.
- Assist clients in preparing for Stage 1, Stage 2, and surveillance audits conducted by certification bodies.
- Coordinate with client teams to obtain evidence and complete agreed deliverables on time.
- Maintain confidentiality of client information and audit records.
What you'll bring
- 1–3 years of relevant experience in ISO 27001 auditing, ISMS implementation, or information security compliance.
- Working knowledge of ISO/IEC 27001:2022 requirements and its 93 Annex A controls.
- Practical experience in reviewing audit evidence, documenting findings, and preparing audit reports.
- Understanding of information security risk assessment and risk treatment methodologies.
- Sound knowledge of IT infrastructure, networking, access controls, cloud security fundamentals, and cybersecurity practices.
- Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related discipline; equivalent relevant experience may be considered.
- ISO 27001 Lead Auditor or Internal Auditor training/certification is preferred.
- Familiarity with ISO 19011 auditing guidelines and ISO/IEC 27002 guidance is desirable.
- Strong written and verbal communication skills, with confidence in conducting client interviews.
- Willingness to travel to client locations when required.