ISO Auditor (6-Month Fixed-Term)

The ISO Auditor will collaborate with business stakeholders to conduct comprehensive audits of IT general controls, application controls, information security, and business functions. They will address client and internal inquiries regarding compliance, privacy, and security matters, providing expert guidance. Responsibilities include maintaining and enhancing the company's risk register, ensuring timely completion of corrective actions, and managing the lifecycle of policies and security documentation. The auditor will also prepare meeting minutes, collect and analyze data, and align the company's security strategy with internal teams, industry best practices, and global legislation such as SOC 1, SOC 2, and ISO 27001. Developing and overseeing mitigation plans for information security risks, conducting vendor security risk assessments, and contributing to security awareness initiatives are also key duties. Furthermore, the role involves forging strong partnerships with various internal teams and staying updated on emerging trends in cybersecurity and compliance.