Full job descriptionInternal Auditor – ISMS & BCMS
Location: Remote with occasional UK travel to visit clients in London
Contract: 4 months
Type: Contract / Consultancy
We are supporting a leading organisation with the appointment of an experienced Internal Auditor to provide independent assurance across its Information Security Management System (ISMS) and Business Continuity Management System (BCMS).
This is a defined 4-month project focused on developing a risk-based audit framework, delivering three internal audits and establishing a repeatable model for future audit cycles.
Key Responsibilities
*Develop a risk-based multi-year ISMS & BCMS internal audit plan.
*Create the detailed 2026 audit programme, including scope, objectives, methodology and timetable.
*Plan and conduct three independent internal audits.
*Review documentation, evidence and controls and conduct stakeholder interviews and walkthroughs.
*Identify and validate findings, risks and areas of non-conformity.
*Produce clear, evidence-based audit reports and prioritised remediation recommendations.
*Establish a repeatable annual audit model, including planning, methodology, reporting and remediation tracking.
*Develop supporting templates and documentation and provide knowledge transfer.
*Work independently while maintaining objectivity and professional challenge.
Essential Requirements
*ISO/IEC 27001:2022 Lead Auditor certification.
*ISO 22301:2019 Lead Auditor certification.
*Demonstrable experience conducting internal audits against both standards.
*Experience developing risk-based ISMS and BCMS audit programmes.
*Strong understanding of ISMS and BCMS governance, implementation and assurance.
*Excellent audit planning, reporting and stakeholder management skills.
Evidence of both current Lead Auditor certifications will be required.
Desirable
*Experience auditing complex or international organisations.
*Experience supporting ISO certification or surveillance audits.
*Information security and business continuity risk management experience.
*Experience with Microsoft 365, Azure and cloud environments.
*Consultancy, Big 4 or specialist assurance experience.
*Experience reporting to senior management, Risk Committees or Boards.
Key Deliverables
The successful contractor will deliver:
*Multi-year ISMS & BCMS audit plan.
*Detailed 2026 audit programme.
*Three completed internal audits and formal reports.
*Prioritised remediation recommendations.
*Repeatable annual audit framework, methodology and templates.
*Knowledge transfer and handover.
This is an excellent opportunity for an experienced ISO 27001 & ISO 22301 Internal Auditor to take ownership of a defined project and help establish a long-term assurance framework.
Please note: This is a 4-month project-based assignment with occasional travel to client locations in the UK.