ISO 27001 Implementation Consultant

NRG Resourcing Ltd; Newcastle upon Tyne; On-site; GBP 83,000 - 120,000; Full time

Job summary

NRG Resourcing Ltd is assisting a life sciences organisation with ISO 27001 implementation. The consultant will take a hands-on role in delivery, not just advisory, shaping the ISMS, risk treatment, and audit readiness.

Strong ISO 27001:2022 knowledge, security background, and ability to transfer expertise across teams are essential. Initial 3-month contract with potential extension; Inside IR35; day rate depends on experience.

Qualifications

• Proven experience delivering an ISO 27001 implementation from early stage.
• Strong knowledge of ISO 27001:2022, information security risk management and controls.
• Technical, security engineering or information security background.
• Excellent documentation, stakeholder engagement and knowledge-transfer skills.
• Experience in life sciences, pharmaceuticals or regulated environments advantageous.

Responsibilities

• Assess current position, perform gap analysis and identify non-compliance.
• Develop ISMS including policies, procedures, risk registers and Statement of Applicability.
• Recommend and support practical technical and security controls.
• Gather evidence and prepare for internal/external audits.
• Transfer knowledge to internal teams for rollout across departments.

Job description

Contract: Initial 3 months, potentially extending to 6 months INSIDE IR35

Start: October 2026

Day rate: Dependent on experience

NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation within one of its departments.

We are looking for an experienced ISO 27001 Implementation Consultant who can provide expert direction while taking a hands‑on role in delivery. This is not a purely advisory or audit-focused assignment.

Key responsibilities:

• Assess the current position, conduct a gap analysis and identify areas of non‑compliance
• Develop the ISMS, including policies, procedures, risk registers, treatment plans and the Statement of Applicability
• Recommend and support the implementation of practical technical and security controls
• Gather evidence and prepare the department for internal and external audits
• Transfer knowledge to the internal team and help create an approach that can be rolled out across other departments and operating companies

Key requirements:

• Proven experience of delivering an ISO 27001 implementation from an early stage
• Strong knowledge of ISO 27001:2022, information security risk management and control implementation
• A technical, security engineering or information security background
• Strong documentation, stakeholder engagement and knowledge‑transfer skills
• Experience within life sciences, pharmaceuticals or another regulated environment would be advantageous

Relevant ISO 27001 qualifications are beneficial, but practical implementation experience is essential.

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic.

Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero‑tolerance policy for breaches of our Equality and Diversity policy.