ISO Internal Auditor/ ISO Improvement Lead

If you’re an experienced ISO Auditor looking for a role where your expertise will directly influence compliance, improvement, and stakeholder confidence — we want to hear from you. Apply today and be part of a team committed to continuous improvement in a dynamic healthcare environment.

About Our Role

We are looking for an ISO Internal Auditor / ISO Improvement Lead to join our Compliance team in York. Reporting into the Senior Compliance Manager, you will play a key role in independently planning and delivering internal audits across our ISO 9001 (Quality Management) and ISO 27001 (Information Security) frameworks. This is a highly visible role where you’ll work across IT, clinical, and administrative teams to ensure we meet regulatory and certification standards while driving ongoing improvements in quality and security practices.

What you’ll be doing:

• Planning and delivering internal audits across ISO 9001, ISO 27001, and related compliance areas
• Assessing compliance against policies, procedures, and regulatory requirements
• Identifying risks, gaps, and non-conformities, and recommending corrective actions
• Supporting root cause analysis and verifying the effectiveness of improvements
• Preparing for external audits and certifications (e.g. DSPT, Cyber Essentials)
• Acting as a key liaison during certification audits where required
• Supporting Information Governance spot checks and other internal audits
• Maintaining accurate audit documentation, reports, and records
• Coordinating and supporting the Integrated Management System, including reporting and meeting administration
• Keeping up to date with ISO and regulatory changes and advising stakeholders
• Supporting and project managing client audits related to information and physical security

What We Need From You

To succeed in this role, you will bring a strong combination of technical auditing expertise, stakeholder engagement, and a passion for continuous improvement.

Qualifications & Experience:

• Certified Internal Auditor in ISO 9001:2015 and ISO 27001
• Proven experience auditing within IT and healthcare environments
• Strong working knowledge of GDPR, NHS DSPT, and information security best practices
• Experience working across multidisciplinary teams
• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management abilities
• Highly organised with strong attention to detail
• Ability to work independently and manage competing priorities
• Proficiency in audit tools, MS Office, and compliance systems
• Strong documentation and reporting capabilities

How we say thank you

An exciting career is much more than just a salary. We also understand that everyone, regardless of culture, gender identity, religion, ethnicity, age, neurodiversity, or disability status, can contribute to our goal to make our work better for all. Our strength is in our people. At Onebright we have a range of benefits that include:

• 26 days holiday with an option to purchase more through our holiday purchase scheme. Plus bank holidays on top.
• Access to an excellent Employee assistance program to help you with your wellbeing.
• A private company pension with Royal London.
• Access to Continuous Professional Development.
• A cash plan to help with unexpected health issues.
• Rewards gateway giving access to perks and savings with retailers.
• Technology package for hybrid working.
• Access to our Onebright L&D platform.
• Cash reward for referring friends and colleagues.

PLEASE NOTE THIS POSITION IS BASED IN YORK.

Onebright is committed to delivering in line with safer recruitment principles and therefore the successful candidate will be required to undertake a credit check and a DBS check (Enhanced or Standard) with the Disclosure and Barring Service (DBS), the cost of which will be met by Onebright. Onebright is committed to adhering to the Equality Act 2010 and provides equal opportunities to all applicants, staff and clients. Should you wish to discuss any adjustment or assistance you might need in the application or interview process, please contact our Recruitment Team and we will organise appropriate support. Please note, all applicants must be legally entitled to accept and perform work in the UK and we will seek to complete a Right To Work check for all candidates.

For further information please email careers@onebright.com or call the Onebright Recruitment Team on 01904 933519 for more information.