ISO 27001 Implementation Consultant
Sign up free to see how well your resume matches this role.
What you'll do
- Assess the current position, conduct a gap analysis and identify areas of non-compliance
- Develop the ISMS, including policies, procedures, risk registers, treatment plans and the Statement of Applicability
- Recommend and support the implementation of practical technical and security controls
- Gather evidence and prepare the department for internal and external audits
- Transfer knowledge to the internal team and help create an approach that can be rolled out across other departments and operating companies
What they're looking for
- Proven experience of delivering an ISO 27001 implementation from an early stage
- Strong knowledge of ISO 27001:2022, information security risk management and control implementation
- A technical, security engineering or information security background
- Strong documentation, stakeholder engagement and knowledge-transfer skills
Nice to have
- Experience within life sciences, pharmaceuticals or another regulated environment would be advantageous
- Relevant ISO 27001 qualifications are beneficial
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Contract: Initial 3 months, potentially extending to 6 months INSIDE IR35
Start: October 2026
Day rate: Dependent on experience
NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation within one of its departments.
We are looking for an experienced ISO 27001 Implementation Consultant who can provide expert direction while taking a hands-on role in delivery. This is not a purely advisory or audit-focused assignment.
Key responsibilities:
- Assess the current position, conduct a gap analysis and identify areas of non-compliance
- Develop the ISMS, including policies, procedures, risk registers, treatment plans and the Statement of Applicability
- Recommend and support the implementation of practical technical and security controls
- Gather evidence and prepare the department for internal and external audits
- Transfer knowledge to the internal team and help create an approach that can be rolled out across other departments and operating companies
Key requirements:
- Proven experience of delivering an ISO 27001 implementation from an early stage
- Strong knowledge of ISO 27001:2022, information security risk management and control implementation
- A technical, security engineering or information security background
- Strong documentation, stakeholder engagement and knowledge-transfer skills
- Experience within life sciences, pharmaceuticals or another regulated environment would be advantageous
Relevant ISO 27001 qualifications are beneficial, but practical implementation experience is essential.
If you have previously helped take an organisation through an ISO 27001 implementation and are available to begin a new contract in October, please apply with your latest CV and availability.
NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic.
Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.