At a Glance
- Tasks: Lead ISO/IEC 27001 remediation and prepare for surveillance audits.
- Company: Dynamic consultancy focused on information security management.
- Benefits: Competitive daily rate, flexible remote work, and impactful project experience.
- Other info: Opportunity to work independently with diverse stakeholders.
- Why this job: Make a real difference in enhancing information security governance.
- Qualifications: ISO/IEC 27001 Lead Auditor or Implementer experience preferred.
The predicted salary is between 51750 - 63250 £ per year.
Role title: ISO/IEC 27001:2022 Remediation Lead – ISMS Surveillance Audit Preparation
Start Date: ASAP (Remediation to be complete ahead of 16–18 November 2026)
IR35 Status: Inside IR35
Rate: £550 per day
Location: Preferable 1 day per week in Glasgow office, but open to negotiation location dependent
Overview:
Lead and coordinate remediation activities arising from an independent assurance review, and prepare the Information Security Management System (ISMS) for ISO/IEC 27001:2022 Surveillance Audit. The focus is on addressing control weaknesses, strengthening governance and evidencing the effective operation of the ISMS ahead of the LRQA surveillance visit scheduled for 16–18 November 2026. This role operates independently of day-to-day control ownership, working with business, technology and cyber security stakeholders to drive corrective actions to completion. As independent review activity, it should be undertaken by competent personnel independent of the areas under review.
Key responsibilities:
- Coordinate closure of audit findings and opportunities for improvement.
- Enhance the effectiveness of operational security controls.
- Support Management Review and surveillance preparation activities.
- Produce auditor-ready documentation, including evidence packs suitable for external auditor inspection.
Experience required:
- ISO/IEC 27001:2022 Lead Auditor or Lead Implementer experience is preferred.
- Strong knowledge of ISO/IEC 27001:2022 Clauses 4–10 and the associated controls is required, along with significant ISMS remediation experience, including re-certification support and surveillance audits.
- Candidates should be comfortable producing auditor-ready documentation to a standard suitable for external inspection.
Engagement window: Remediation to be complete ahead of 16–18 November 2026 (LRQA Surveillance Audit 2)
ISO 27001 Consultant – Surveillance Audit Remediation (Contract / Remote) in Glasgow employer: Gigged.AI
Gigged AI is an exceptional employer that offers a dynamic and flexible work environment, allowing you to thrive as a Business/Systems Analyst while working remotely with occasional travel to the picturesque Isle of Man. With a strong focus on employee growth and development, we provide opportunities to engage in meaningful projects that enhance your skills and career trajectory, all within a supportive culture that values collaboration and innovation.
StudySmarter Expert Advice🤫
We think this is how you could land ISO 27001 Consultant – Surveillance Audit Remediation (Contract / Remote) in Glasgow
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like Gigged.AI looking for candidates who are engaged and informed.
We think you need these skills to ace ISO 27001 Consultant – Surveillance Audit Remediation (Contract / Remote) in Glasgow
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at Gigged.AI. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at Gigged.AI
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with Gigged.AI’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
