ISO 27001 Lead Auditor (Internal Audit)

Intelance; Greater London; Remote; GBP 92,000 - 138,000; Full time

Benefits offered by this job

Remote, project-based assignments

Structured templates and qualityReview

Independent assurance panel role

Job summary

Intelance is seeking a qualified ISO 27001 Lead Auditor to serve as an associate contractor for remote internal audits. The role involves planning, interviewing, evidence review, and reporting across UK and Asia-based clients, with assignments scoped and priced separately.

The candidate will work independently on audits, ensuring compliance with ISO/IEC 27001:2022 and Annex A, and will deliver clear, actionable findings for leadership. This role offers flexible, project-based engagements.

Qualifications

• Current ISO/IEC 27001 Lead Auditor certificate from a recognized body.
• Hands-on auditing experience against ISO/IEC 27001:2022 and Annex A controls.
• Led at least three ISO 27001 audits in the last three years.
• Experience auditing cloud-based and SaaS businesses.
• Ability to write concise, evidence-based findings for non-technical leaders.
• UK-based, self-employed contractor status and independence disclosures.

Responsibilities

• Plan and carry out independent internal audits against ISO/IEC 27001:2022 clauses 4–10 and Annex A.
• Build an audit plan and checklist derived from scope and prior findings.
• Interview control owners, review evidence in client platforms and tools.
• Check closure of previous non-conformities and validate fixes.
• Raise findings graded as major, minor, or improvement opportunities.
• Write a short plain-English audit report for leadership action.
• Present findings at a closing meeting with the client and Intelance.
• Remain fully independent of daily ISMS operations and follow procedures.

Skills

Concise reporting

Independent contractor mindset

Education

ISO 27001 Lead Auditor certificate

Tools

Vanta

Drata

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for clients certified to ISO/IEC 27001:2022, and we are appointing a qualified ISO 27001 Lead Auditor as an associate contractor to carry out independent internal audits.

Your first assignment is a remote internal audit of an ISO 27001 certified technology company with offices in the UK and Asia. The audit is planned for early February 2027 and needs about 3 to 5 days, including planning, interviews, evidence review and the report. Further internal audit assignments will follow as our managed ISMS service grows.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Plan and carry out independent internal audits against ISO/IEC 27001:2022 clauses 4 to 10 and the Annex A controls.

• Build a risk based audit plan and checklist from the client's scope, Statement of Applicability and previous audit findings.

• Interview control owners and review evidence in the client's compliance platform (for example Vanta) and document tools (for example Notion).

• Check that earlier non-conformities have been closed properly and the fixes work.

• Raise clear findings graded as major non-conformity, minor non-conformity or opportunity for improvement.

• Write a short, plain English audit report that the client's leadership can act on before management review.

• Present findings at a closing meeting with the client and Intelance.

• Stay fully independent of the team that runs the client's ISMS day to day.

• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Requirements

Essential

• A current ISO/IEC 27001 Lead Auditor certificate (PECB, CQI and IRCA, BSI or equivalent).

• Hands on experience auditing against ISO/IEC 27001:2022, including the updated Annex A controls.

• At least three ISO 27001 internal or certification audits led in the last three years.

• Experience auditing cloud based and SaaS businesses.

• Able to write concise, evidence based findings that non technical leaders understand.

• Based in the UK and able to work as a self-employed contractor.

• Willing to declare any certification body work so we can confirm you are independent before each assignment.

Desirable

• Experience auditing organisations that use Vanta, Drata or a similar compliance platform.

• Experience auditing companies with offices in more than one country.

• Knowledge of UK GDPR and how it links to ISO 27001.

• ISO/IEC 27001 Lead Implementer certificate.

Benefits

• Join Intelance's specialist cyber assurance associate panel.

• Clearly scoped, remote assignments with a written scope, timetable and agreed day rate.

• Regular internal audit work as our managed ISMS client base grows.

• Work alongside an experienced assurance team with structured templates and quality review.

• Flexible, project based work you can fit around other commitments.