ISMS & BCMS Internal Audit Lead

Synapri; Greater London; On-site; GBP 85,000 - 105,000; Full time

Job summary

Synapri is seeking an experienced ISMS & BCMS Internal Audit Lead for a remote contract with occasional travel to London. You will develop and execute a risk-based internal audit programme aligned to ISO/IEC 27001:2022 and ISO 22301:2019.

You will plan and deliver audits, assess control effectiveness, interview stakeholders, and deliver reports with actionable remediation. Establishing a repeatable audit model and knowledge transfer will be key to future cycles.

Qualifications

• ISO/IEC 27001:2022 Lead Auditor certification.
• ISO 22301:2019 Lead Auditor certification.
• Demonstrable experience conducting internal audits against both standards.
• Experience developing risk-based ISMS and BCMS audit programmes.
• Strong understanding of information security governance, controls and assurance.

Responsibilities

• Develop the audit strategy and detailed 2026 audit plan.
• Independently plan and deliver three internal audits.
• Assess control effectiveness and review evidence.
• Conduct stakeholder interviews and walkthroughs.
• Produce clear, evidence-based reports with remediation recommendations.
• Establish a repeatable annual ISMS & BCMS audit model with methodology, templates, governance and findings tracking.

Job description

ISMS & BCMS Internal Audit Lead

Contract Outside IR35 Remote with occasional travel to London

We are looking for an experienced ISMS & BCMS Internal Audit Lead to provide independent specialist assurance across a Group Information Security Management System (ISMS) and Business Continuity Management System (BCMS).

This is a key assignment for an accomplished audit professional who can take ownership of developing and delivering a risk-based, multi-year internal audit programme, aligned to ISO/IEC 27001:2022 and ISO 22301:2019.

The Role

You will be responsible for developing the audit strategy and detailed 2026 audit plan, as well as independently planning and delivering three internal audits. You will assess control effectiveness, review evidence, conduct stakeholder interviews and walkthroughs, and produce clear, evidence-based reports with practical remediation recommendations.

A key part of the assignment will also be establishing a repeatable annual ISMS & BCMS audit model, including methodology, templates, governance, findings tracking and knowledge transfer to support future audit cycles.

Key Requirements

• ISO/IEC 27001:2022 Lead Auditor certification
• ISO 22301:2019 Lead Auditor certification
• Demonstrable experience conducting internal audits against both standards
• Experience developing risk-based ISMS and BCMS audit programmes
• Strong understanding of information security and business continuity governance, controls and assurance

Experience working within complex or multi-entity organisations, supporting ISO certification audits is required.

This is an excellent opportunity for an independent and experienced audit professional to deliver a high-impact piece of work and establish a sustainable audit framework for the future.