Information Security & Cybersecurity Lead Auditor

Overview

Lead Auditor conducts audits, compliance assessments, and security reviews aligned with ISO/IEC 27001 and related cybersecurity frameworks. The role involves evaluating governance and operational security practices, assessing risk management, and supporting certification decisions. The auditor also prepares audit reports and conducts audits across UAE client locations.

• Plan and execute ISO 27001 certification, surveillance, and compliance audits onsite and remote.
• Assess Information Security Management Systems (ISMS) policies, procedures, and control effectiveness.
• Perform technical security assessments covering firewall, network security, identity and access management, endpoint security, SIEM, and vulnerability management.
• Review security controls related to system acquisition, change management, application security, data protection, and business continuity.
• Prepare audit reports, document findings, track corrective actions, and verify closure of non-conformities.

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Minimum 5+ years of Information Security/Cybersecurity experience.
• Minimum 3+ years of ISO 27001 auditing experience (Lead Auditor experience preferred).
• Strong practical knowledge of ISO/IEC 27001:2022 controls, ISO 19011 audit methodology, risk management frameworks, cybersecurity governance and compliance, and technical security controls.