At a Glance
- Tasks: Conduct risk-based internal audits and strengthen security culture across global offices.
- Company: Join Arup, a leader in sustainable development and innovative design.
- Benefits: Inclusive workplace, diverse teams, and opportunities for professional growth.
- Other info: Supportive environment promoting diversity and inclusion.
- Why this job: Make a meaningful impact while working on ambitious projects with a collaborative team.
- Qualifications: Experience in ISO 27001 audits and strong analytical skills required.
The predicted salary is between 51750 - 63250 £ per year.
Dedicated to sustainable development, Arup is a collective of designers, consultants and experts working globally.
At Arup you will have the opportunity to collaborate on ambitious projects - delivering remarkable outcomes for clients and communities, and to do socially useful work that has meaning.
Arup's purpose, shared values and collaborative approach has set it apart for over 75 years, and now is your opportunity to join.
AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future-ready workplaces.
We help organisations adapt, grow, and thrive in an ever-evolving world by building, shaping, and optimising diverse talent strategies.
We partner with Arup to support their contingent recruitment processes.
Acting as an extension of their recruitment teams, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.
On Behalf of Arup, we are looking for a ISO 27001 Internal Auditor for a 12 Month contract based in either the London office or from one of Arups other UK locations.
Purpose of the role: The role plans and delivers risk-based internal audits against ISO/IEC 27001 requirements, internal information security policies, client commitments, legal and regulatory obligations, and good-practice security controls.
The postholder works collaboratively with stakeholders across Digital Services, business leadership, project teams, People, Legal, Procurement, Risk and Compliance to support continual improvement and strengthen security culture across Arup's global offices.
What you'll do: Develop and maintain a risk-based ISO 27001 internal audit programme covering global offices, regional operations, shared services and project delivery environments.
Plan, scope and conduct internal audits of the ISMS, security governance processes, risk management activities and control operation.
Assess conformance with ISO/IEC 27001, internal policies, procedures, standards, contractual obligations and applicable regulatory expectations.
Perform audits remotely and, where appropriate, onsite across multiple geographies, time zones and operating contexts.
Evaluate the effectiveness of controls relating to access management, asset management, supplier security, incident management.
The skills you'll need: Practical experience planning and conducting ISO 27001 internal audits in a complex organisation.
Strong understanding of ISMS principles, security governance, control testing and risk management.
Ability to review evidence, analyse root causes and communicate findings in business-focused language.
Excellent report writing, interviewing, stakeholder management and facilitation skills.
Experience in professional services, engineering, consultancy or project-based environments.
About the client Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce.
Guided by its values and alignment with the UN Sustainable Development Goals, Arup creates and contributes to equitable spaces and systems, while cultivating a sense of belonging for all.
Arup's internal employee networks support their inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ and disability inclusion - creating a space for everyone to express themselves and make a positive difference.
If you are interested in applying for this position and meet the criteria outlined above, please click the link to apply and speak to one of our Sourcing Specialists.
AMS are committed to providing all our candidates with the opportunity to perform at their best throughout the recruitment process.
Please let us know if you require any additional support or reasonable adjustments during the screening process and we will work with you and Arup to identify the best solution to meet your requirements.
AMS, a Recruitment Process Outsourcing Company, may in the delivery of some of its services be deemed to operate as an Employment Agency or an Employment Business. c272c101-f45c-4783-b4a0-50ad222b87c0
ISO 27001 Internal Auditor employer: Arup CWS
Arup is an exceptional employer that champions sustainable development and fosters a collaborative work culture, allowing employees to engage in meaningful projects that positively impact communities. With a strong commitment to diversity and inclusion, Arup provides ample opportunities for professional growth and development, ensuring that every team member can contribute to ambitious goals while enjoying a supportive environment. Working remotely in the UK, with occasional travel, offers flexibility and the chance to be part of a global team dedicated to embedding critical risk controls and assurance practices across projects worldwide.
