Information Security GRC Lead - ISO27001

Information Security GRC Lead - ISO27001

Full-Time 36000 - 60000 € / year (est.) No home office possible
Cyber Security training courses

At a Glance

  • Tasks: Lead ISO 27001 implementation and certification across a global organisation.
  • Company: Join a forward-thinking company prioritising information security.
  • Benefits: Competitive salary, flexible working options, and professional growth opportunities.
  • Other info: Collaborative environment with diverse teams and exciting challenges.
  • Why this job: Make a significant impact on global security standards and governance.
  • Qualifications: Proven experience in ISO 27001 certification and strong risk management skills.

The predicted salary is between 36000 - 60000 € per year.

We are seeking an experienced ISO 27001 Lead to drive end-to-end implementation and certification across a global organisation. This role will lead the design, build and operationalisation of the ISMS in line with ISO/IEC 27001:2022.

Key Responsibilities

  • Conduct enterprise-wide ISO 27001:2022 gap assessment
  • Define ISMS scope, context, governance and risk methodology.
  • Develop the risk register, Statement of Applicability (SoA) and risk treatment plans.
  • Deliver a prioritised implementation roadmap including budget, resourcing and timelines.
  • Establish ISMS governance, metrics, management review and audit readiness.
  • Coordinate cross-functionally with Technology, Security, Legal, HR, Procurement and Business Units.

Required Experience

  • Proven track record leading ISO 27001 certification end-to-end in complex environments.
  • Strong knowledge of ISO/IEC 27001:2022 and ISO 27002:2022.
  • Experience implementing risk management frameworks, ISMS governance and controls.
  • Cloud security familiarity (Azure/M365, AWS, GCP) and core disciplines (IAM, monitoring, incident & vulnerability management).
  • Strong stakeholder engagement and programme delivery capability.

Deliverables

  • Gap assessment report
  • Defined ISMS scope and governance model
  • Implementation roadmap with budget & resource plan
  • Audit-ready documentation and KPI dashboard

Qualifications

  • ISO 27001 Lead Implementer and/or Lead Auditor.

Information Security GRC Lead - ISO27001 employer: Cyber Security training courses

Join a forward-thinking global organisation that prioritises innovation and security, where your expertise as an Information Security GRC Lead will be pivotal in shaping our ISO 27001 compliance journey. We foster a collaborative work culture that values professional growth, offering extensive training and development opportunities to enhance your skills. Located in a vibrant city, we provide a dynamic environment that encourages creativity and teamwork, making it an excellent place for those seeking meaningful and rewarding employment.

Cyber Security training courses

Contact Detail:

Cyber Security training courses Recruiting Team

StudySmarter Expert Advice🤫

We think this is how you could land Information Security GRC Lead - ISO27001

Tip Number 1

Network like a pro! Reach out to your connections in the information security field, especially those who have experience with ISO 27001. A friendly chat can lead to insider info about job openings or even referrals.

Tip Number 2

Show off your expertise! Prepare a presentation or a case study on a successful ISO 27001 implementation you've led. This not only demonstrates your skills but also gives you something tangible to discuss during interviews.

Tip Number 3

Stay updated on industry trends! Follow relevant blogs, podcasts, and forums related to ISO 27001 and information security. This knowledge will help you engage in meaningful conversations with potential employers.

Tip Number 4

Apply through our website! We’ve got a streamlined application process that makes it easy for you to showcase your qualifications. Plus, it shows us you're genuinely interested in joining our team!

We think you need these skills to ace Information Security GRC Lead - ISO27001

ISO 27001
ISMS Design and Implementation
Risk Management Frameworks
Governance and Compliance
Cloud Security (Azure/M365, AWS, GCP)
Stakeholder Engagement
Programme Delivery

Some tips for your application 🫡

Tailor Your CV:Make sure your CV is tailored to the role of Information Security GRC Lead. Highlight your experience with ISO 27001 and any relevant projects you've led. We want to see how your skills match what we're looking for!

Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're passionate about ISO 27001 and how your background makes you the perfect fit for this role. We love hearing personal stories that connect to our mission.

Showcase Your Achievements:When detailing your experience, focus on specific achievements related to ISO 27001 certification. Numbers and outcomes speak volumes, so if you’ve improved processes or led successful implementations, let us know!

Apply Through Our Website:We encourage you to apply through our website for a smoother application process. It helps us keep everything organised and ensures your application gets the attention it deserves. Plus, it’s super easy!

How to prepare for a job interview at Cyber Security training courses

Know Your ISO 27001 Inside Out

Make sure you’re well-versed in ISO/IEC 27001:2022 and ISO 27002:2022. Brush up on the key principles, requirements, and recent updates. Being able to discuss these confidently will show that you’re not just familiar with the standards but are genuinely passionate about information security.

Prepare for Scenario-Based Questions

Expect questions that ask how you would handle specific situations, like conducting a gap assessment or developing a risk register. Think of examples from your past experience where you successfully navigated similar challenges, and be ready to explain your thought process and outcomes.

Showcase Your Stakeholder Engagement Skills

This role requires strong collaboration across various departments. Be prepared to discuss how you’ve effectively engaged stakeholders in previous roles. Highlight any strategies you used to ensure alignment and buy-in, as this will demonstrate your ability to coordinate cross-functionally.

Have a Clear Implementation Roadmap Ready

Since you’ll need to deliver an implementation roadmap, think about how you would structure one. Be ready to discuss how you would define scope, budget, resources, and timelines. This shows that you can think strategically and have a practical approach to project delivery.