ISO 27001 Implementation Specialist - Interim

Hartley Resourcing Ltd; Eastleigh; Remote; GBP 111,000 - 185,000; Full time

Job summary

Hartley Resourcing Ltd is recruiting an Interim Specialist to deliver an ISO 27001 programme from Stage 1 to certification. You will own the Stage 2 readiness plan and embed the ISMS across IT, Security, Compliance, HR, Finance, Projects and Exports, with hands-on delivery rather than advisory work.

You can work remotely, visiting company sites when needed. Southampton is the main site. The role is 6–12 months with potential evolution as the business grows.

Qualifications

• Solid, progressive experience ISO 27001:2022.
• Lead Implementer or Lead Auditor qualification.
• Proven ability to drive non-IT departments to own controls.
• Hands-on with a compliance platform (Drata, Vanta, Secureframe or similar).
• Sufficient MS 365 and Entra ID knowledge for IT conversations.
• Strong written English to produce clear policies and procedures.

Responsibilities

• Complete Stage 1, the framework is nearly ready.
• Own Stage 2 readiness plan with owners, dates and status.
• Close gaps in documentation or operations via owners.
• Make ISMS understood and owned across departments.
• Embed processes so evidence is seen in day-to-day operations.

Skills

ISO27001 2022

Lead Implementer

Lead Auditor

Cross-functional ownership

Compliance platform (Drata/Vanta/S…)

Microsoft 365 & Entra ID

Strong English writing

Job description

We are recruiting for an Interim Specialist to deliver an ISO 27001 programme. You will own it through to certification. Much of the Stage 1 work is done and LRQA passed, the job is to close some remaining gaps relating to Stage 1, land the management system with the people who run it, and have the evidence ready for Stage 2. This is a hands on delivery role, not an advisory one. You will have support from an established QA/Compliance function, senior management is behind this, and the company has a brilliant culture to operate within, one of the best. You will work inside the business with department heads and control owners, turning requirements into working practice. You can work remotely, visiting company sites when you need to. Southampton is the main site. We estimate the job will be 6-12 months. With the company growing as it is, there is the possibility it could morph into something else later.

The Role

• Complete Stage 1, the framework for which is already just about ready
• Own the Stage 2 readiness plan: gap registers, owners, dates and weekly status
• Close gaps directly where they are documentation or configuration, and through control owners where they are operational
• Make the ISMS understood and owned across IT, Security, Compliance, HR, Finance, Projects and Exports
• Simplify and embed processes so evidence is see in day to day operations, not just on a checklist for the audit
• Hand over a system the permanent team can sustain through surveillance audits

The Ideal Candidate

• Solid, progressive experience ISO 27001:2022
• ISO27001 Lead Implementer or Lead Auditor qualification
• Track record of getting non IT departments to own controls, with the credibility and patience to make it stick
• Hands on with a compliance platform (eg Drata, Vanta, Secureframe or similar)
• Enough Microsoft 265 and Entra ID surface understanding to have sensible conversations with the IT team
• Strong written English to deliver good quality policies and procedures that are an easy read
• If you have CISM, CISSP or CISA then great, but not essential

Additional Information

Salary is dependent upon experience. This is working for a fantastic company who really value their staff.

Please note, due to the volume of applications we are not always able to contact each applicant individually. If you have not heard from us within 3 working days of application please assume that you have been unsuccessful on this occasion