ISO 27001 Internal Auditor

📋 Description

• Own internal audits end to end from kickoff to final report.
• Review evidence on the Secfix platform and assess against ISO 27001 controls.
• Run customer calls and walk customers through findings and non-conformities.
• Catch non-conformities that matter to prevent issues in external audits.
• Write findings in clear, actionable language for non-technical founders.
• Maintain multiple audits on schedule and stay neutral between auditing and helping.

🎯 Requirements

• Up to 2 years of information security background.
• Hands-on ISO 27001 internal audit experience, with at least 10 audits you personally ran.
• A PECB ISO 27001 Lead Auditor certification or direct equivalent.
• Direct experience auditing inside a modern GRC platform.
• Clear, concrete written and spoken English.
• Nice-to-have: TISAX/ISO 42001/NIS2 or SOC 2 experience.

🎁 Benefits

• Remote Work: 100% remote work with Gather.
• Competitive Salary: Local market rates.
• Equity: Generous equity package.
• Mentorship: Access to world-class mentors.
• Development Budget: €1,000 annual budget.
• Home office Budget: Budget for home office/co-working.