ISO & ISMS Internal Auditor – Hybrid

Workman; Greater London; Hybrid; GBP 42,000 - 65,000; Full time

Benefits offered by this job

Discretionary annual bonus

Healthcare & life insurance

Birthday off

Extra holidays

Hybrid working

Study support

Wellness programme

Gym membership

Job summary

Workman is seeking an Internal Auditor to independently assess adherence to regulatory requirements and internal policies across 11 UK offices, with a strong focus on ISO 27001:2022 ISMS audits, and Cyber Essentials Plus, IT backup, restoration, and physical security audits. The role emphasizes structured audit planning, detailed reporting, and proactive stakeholder engagement.

You will support ISO 9001:2015 audits, lead spot-checks, and provide guidance on trends and best practices while

Qualifications

• Experience in internal audit, compliance, risk or governance roles.
• Knowledge of ISO accreditation frameworks.
• Excellent attention to detail.
• Strong analytical and problem solving skills.
• Experience in the property industry is beneficial but not essential.
• High levels of integrity, discretion and professional judgment.
• Excellent diary management

Responsibilities

• Independently manage the ISO 27002:2022 internal audit across all offices and the firm.
• Support the ISO 9001:2015 audits which take place twice a year.
• Lead compliance spot-checks on all offices and departments to ensure continuity of practices.
• Ensure client due diligence questionnaires are received, processed and analysed accordingly.
• Prepare audit reports and document findings clearly, objectively and in line with ISO standards.
• Provide guidance to stakeholders on internal audit trends, compliance regulations and best practices.
• Providing ad hoc training or responding to compliance queries from internal stakeholders

Skills

ISO 27001

Compliance

Auditing

Risk management

Stakeholder engagement

Analytical skills

Regulatory knowledge

Tools

ISMS

ISO standards

Job description

Workman is seeking an Internal Auditor to independently assess adherence to regulatory requirements and internal policies across 11 UK offices, with a strong focus on ISO 27001:2022 ISMS audits, and Cyber Essentials Plus, IT backup, restoration, and physical security audits. The role emphasizes structured audit planning, detailed reporting, and proactive stakeholder engagement.

You will support ISO 9001:2015 audits, lead spot-checks, and provide guidance on trends and best practices while