ISMS & Documentation

• Build, maintain, and continuously improve ISMS documentation in alignment with ISO/IEC 27001 requirements.
• Develop and manage security policies, procedures, standards, and SOPs.
• Maintain ISMS artifacts including risk assessments, risk treatment plans, SoA, and records of controls.

 

Process & Compliance

• Ensure ISMS processes are properly implemented, followed, and documented across teams.
• Monitor compliance with information security policies and procedures.
• Support the definition and improvement of internal processes related to information security and quality.

 

Audit & Assessment

• Plan and conduct internal ISMS audits and follow up on corrective and preventive actions (CAPA).
• Coordinate and support external ISO 27001 audits.
• Track audit findings, nonconformities, and improvement actions until closure.

 

Risk & Awareness

• Support information security risk assessment and risk treatment activities.
• Assist in maintaining the risk register and control effectiveness tracking.
• Support security awareness activities and ensure related records are properly maintained.

 

Collaboration & Reporting

• Work closely with the Security (technical) team to align processes and controls with technical implementations.
• Collaborate with Engineering, Product, and Operations teams to ensure ISMS requirements are understood and applied.
• Prepare compliance reports, audit evidence, and management review materials.

Experience & Background

• 2–4 years of experience in Quality Assurance, Process Management, Compliance, or ISMS-related roles.
• Hands-on experience working with ISO/IEC 27001 (implementation, maintenance, or audit support).
• Experience in software, SaaS, or product-based environments is preferred.
• Exposure to other standards or frameworks (ISO 9001, SOC 2, GDPR, etc.) is a plus.
• Background in QA, process improvement, or internal audit is a plus.

 

ISMS & Quality Knowledge

• Good understanding of ISO/IEC 27001 clauses and Annex A controls.
• Experience in writing and maintaining policies, procedures, and compliance documentation.
• Familiarity with internal audit processes and corrective action management.

 

Skills

• Strong analytical, documentation, and organizational skills.
• Ability to work independently and manage multiple ISMS tasks in parallel.
• Good communication and collaboration skills.
• English level: Upper-Intermediate or above, capable of conducting ISO 27001 audits and compliance discussions fully in English.