ISO 27001 Lead Auditor

Calibre; Greater London; Remote; GBP 70,000 - 110,000; Full time

Job summary

Calibre, a UK-based, AI-enabled certification body, seeks an ISO 27001 Lead Auditor to run Stage 1 and Stage 2 audits remotely. You will assess whether controls operate, draft findings, and manage reports in our platform as you guide the audit process.

You will lead witnessed audits, perform application and technical reviews, and mentor junior auditors to strengthen our audit workflows.

Qualifications

• Cloud and security infrastructure understanding, able to read IAM policy or Terraform and challenge evidence.
• Experience auditing for an accredited certification body (CB).
• ISO/IEC 27001:2022 lead auditor with an audit log.
• Ability to translate complex technical findings into precise, actionable language.
• Curiosity about cloud-native architectures and AI-enabled audit tooling.

Responsibilities

• Lead remote Stage 1, Stage 2, surveillance and recertification audits end to end.
• Test ISO 27001 implementation against real evidence in client systems.
• Draft findings and audit reports in our platform with clear defensible conclusions.
• Sit in the audit-team-leader seat for witnessed audits.
• Perform application reviews and technical reviews.
• Mentor developing auditors and help improve audit workflows.

Skills

Cloud security understanding

Certification bodies experience

ISO/IEC 27001:2022 lead auditor

Clear communication

Curiosity & AI tooling interest

Job description

ISO 27001 Lead Auditor

Remote · Flexible contract · ISO/IEC 27001:2022

About Calibre

We're building an AI-native accredited certification body from the ground up: audits delivered remotely, in days not months, on our own platform. Founded by two ex-Palantir technical co-founders and backed by an oversubscribed $3.3M pre-seed from top-tier SF VCs. We're now standing up our ISO 27001 certification arm.

The role

You lead the audit. Stage 1, Stage 2, surveillance and recertification. Testing whether a company's ISO 27001 controls actually operate, with sampling you can defend to a CTO and to an accreditation assessor. You draft findings and reports inside our platform. As you deliver, you build your competence file with us and you help sharpen the machine you're auditing on.

This role carries more than fieldwork: you'll act as audit team leader in the witnessed audits during initial accreditation, perform application reviews, technical reviews and mentor the technical auditors coming up behind you.

What you’ll do

• Lead remote Stage 1, Stage 2, surveillance and recertification audits end to end.
• Test ISO 27001 implementation against real evidence, live in the client's systems.
• Draft findings and audit reports in our custom platform; a human owns every finding.
• Sit in the audit-team-leader seat for witnessed audits.
• Perform application reviews and technical reviews.
• Mentor developing auditors and help improve our management system and audit workflows.

Must-haves

• Cloud and security infrastructure understanding. You can read an IAM policy, a Terraform plan, or an audit log and say what it actually does, enough to challenge cloud-era evidence (IAM, logging, CI/CD) rather than accept the summary.
• Certification-body experience. You've audited for an accredited CB. You know the discipline of the client file, impartiality, the decision firewall, NC lifecycles, and what an accreditation witness assessment feels like from the inside.
• ISO/IEC 27001:2022 lead auditor, current , with an audit log.
• Clear communication. You can synthesise complex technical findings into precise, actionable language, ensuring your audit reports remain transparent and defensible.
• Curious. You have a passion for understanding how modern, cloud-native architectures operate and a drive to challenge the status quo, constantly seeking better ways to leverage AI and automated tooling to enhance audit precision and efficiency.