About the mission
We are looking for a Senior Auditor to independently assess the ISMS compliance with ISO/IEC 27001. The role involves evaluating the maturity and completeness of the system, reporting findings to the CISO, and ensuring readiness for certification audits. The ideal candidate will have significant experience in auditing and risk management.
Read the full description
Overview
The internal auditor is tasked with independently and objectively assessing whether the ISMS complies with the requirements of ISO/IEC 27001 and is effectively implemented. In preparation for the phase 1 certification audit, the auditor particularly assesses whether the ISMS is sufficiently established, documented, and operational to withstand external scrutiny. He/she collects sufficient and suitable audit evidence to evaluate the maturity and completeness of the system and timely identify any shortcomings. The auditor reports deviations and improvement points clearly through a formal report to the CISO, who incorporates the audit findings as input for the management review so that corrective measures can be taken before the certification audit. This first internal audit thus serves as a formal readiness assessment of the ISMS.Key Responsibilities
Demonstrable experience as an Auditor
Higher education (Master's or Bachelor's)
Demonstrable experience with methodology for revising and implementing an audit method
Demonstrable experience auditing projects in a similar environment
Skills & Experience
Demonstrable experience as an Auditor
Demonstrable experience in risk management
Demonstrable ISMS audit experience for the ISO 27001 standard
Demonstrable experience as an auditor within the Flemish Government
Demonstrable knowledge and experience regarding NIS2 legislation and how to integrate its requirements into an ISMS according to ISO 27001:2022
Demonstrable knowledge of ISO 19011
Languages
Language requirement: Dutch at European CEFR level C2.
Additional Info
Working hours: Day
Estimated number of hours per person: 80
Employment regime (percentage): 40
Remote work possible? Yes
Desired regime: 2 days per week for 5 weeks can also be 4 days per week for 2.5 weeks.
Ideally in May, no later than June.
Indexing within the duration of this request is possible, after at least 1 year, according to the guidelines of Athumi and with prior coordination.
Important Notice
This assignment is (partially) financed with funds from the Recovery and Resilience Facility (RRF) of the European Union. To ensure its financing, the principle of "do no significant harm" (DNSH) must be observed. By submitting a proposal, the bidder commits to ensuring that the execution of the assignment does not significantly harm the following six environmental objectives: 1) climate change mitigation; 2) climate change adaptation; 3) water and marine life (including groundwater); 4) circular economy; 5) pollution prevention and control; and 6) biodiversity and ecosystems.What you'll do
- Demonstrable experience as an Auditor
- Higher education (Master's or Bachelor's)
- Demonstrable experience with methodology for revising and implementing an audit method
- Demonstrable experience auditing projects in a similar environment
What we're looking for
- Demonstrable experience as an Auditor
- Higher education (Master's or Bachelor's)
- Demonstrable experience with methodology for revising and implementing an audit method
- Demonstrable experience auditing projects in a similar environment
- Demonstrable experience in risk management
- Demonstrable ISMS audit experience for the ISO 27001 standard
- Demonstrable experience as an auditor within the Flemish Government
- Demonstrable knowledge and experience regarding NIS2 legislation and how to integrate its requirements into an ISMS according to ISO 27001:2022
- Demonstrable knowledge of ISO 19011
Skills
- Experience as an Auditor
- Experience in risk management
- ISMS audit experience for ISO 27001
- Higher education (Master's or Bachelor's)
- Experience as an auditor within the Flemish Government
- Experience auditing projects in a similar environment
- Knowledge and experience regarding NIS2 legislation
- Knowledge of ISO 19011
- Integrity and ethical behavior