ISO 27001 Internal Auditor

Dedicated to sustainable development, Arup is a collective of designers, consultants and experts working globally.

At Arup you will have the opportunity to collaborate on ambitious projects - delivering remarkable outcomes for clients and communities, and to do socially useful work that has meaning.

Arup's purpose, shared values and collaborative approach has set it apart for over 75 years, and now is your opportunity to join.

AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future-ready workplaces.

We help organisations adapt, grow, and thrive in an ever-evolving world by building, shaping, and optimising diverse talent strategies.

We partner with Arup to support their contingent recruitment processes.

Acting as an extension of their recruitment teams, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.

On Behalf of Arup, we are looking for a ISO 27001 Internal Auditor for a 12 Month contract based in either the London office or from one of Arups other UK locations.

Purpose of the role

The role plans and delivers risk-based internal audits against ISO/IEC 27001 requirements, internal information security policies, client commitments, legal and regulatory obligations, and good-practice security controls.

The postholder works collaboratively with stakeholders across Digital Services, business leadership, project teams, People, Legal, Procurement, Risk and Compliance to support continual improvement and strengthen security culture across Arup's global offices.

What you'll do

• Develop and maintain a risk-based ISO 27001 internal audit programme covering global offices, regional operations, shared services and project delivery environments.
• Plan, scope and conduct internal audits of the ISMS, security governance processes, risk management activities and control operation.
• Assess conformance with ISO/IEC 27001, internal policies, procedures, standards, contractual obligations and applicable regulatory expectations.
• Perform audits remotely and where appropriate, onsite across multiple geographies, time zones and operating contexts.
• Evaluate the effectiveness of controls relating to access management, asset management, supplier security, incident management.

The skills you'll need

• Practical experience planning and conducting ISO 27001 internal audits in a complex organisation.
• Strong understanding of ISMS principles, security governance, control testing and risk management.
• Ability to review evidence, analyse root causes and communicate findings in business-focused language.
• Excellent report writing, interviewing, stakeholder management and facilitation skills.
• Experience in professional services, engineering, consultancy or project-based environments.
• About the client
• About the client

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce.

Guided by its values and alignment with the UN Sustainable Development Goals, Arup creates and contributes to equitable spaces and systems, while cultivating a sense of belonging for all.

Arup's internal employee networks support their inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ+ and disability inclusion - creating a space for everyone to express themselves and make a positive difference.

If you are interested in applying for this position and meet the criteria outlined above, please click the link to apply and speak to one of our Sourcing Specialists.

AMS are committed to providing all our candidates with the opportunity to perform at their best throughout the recruitment process.

Please let us know if you require any additional support or reasonable adjustments during the screening process and we will work with you and Arup to identify the best solution to meet your requirements.

AMS, a Recruitment Process Outsourcing Company, may in the delivery of some of its services be deemed to operate as an Employment Agency or an Employment Business.