Security Audit Analyst

Death with Dignity; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A nonprofit organization in London is seeking a Security Audit Analyst to conduct customer audits, manage projects, and ensure third-party security compliance. The ideal candidate will have ISO 27001 Lead Auditor certification and experience in risk management. This role offers the opportunity to make a significant impact through thorough auditing processes, with a flexible work arrangement of three days onsite per week.

Qualifications

• Certification as an ISO 27001 Lead Auditor.
• Hands-on experience conducting audits.
• Ability to manage audit processes independently.

Responsibilities

• Conduct customer audits and manage short-term projects.
• Assess third-party security compliance.
• Generate comprehensive audit reports.

Skills

ISO 27001 Lead Auditor certification

Risk management principles understanding

Independent project management

Audit tool proficiency

Experience with compliance frameworks

Job description

Job: Security Audit Analyst

Location: London, UK (3 Days/Week onsite)

Job Type: Open for both Permanent and Fixed Term Contract

Overview

The Third-Party Audit Consultant is responsible for conducting customer audits, managing short-term projects, and assessing third-party security compliance. This role requires ISO 27001 Lead Auditor certification and a solid understanding of risk management principles.

Responsibilities

• Conduct customer audits and manage short-term audit projects from planning to execution.
• Assess third-party security controls and compliance against applicable standards.
• Prepare audit plans, perform fieldwork, and generate clear, comprehensive audit reports.

Requirements

• Certification as an ISO 27001 Lead Auditor, with hands-on experience conducting audits and managing audit processes.
• Ability to manage short-term projects independently, from planning to execution, including audit preparation and report generation.
• Familiarity with technology systems, infrastructure, and related security controls.
• Proven track record of conducting audits of third-party vendors or partners to ensure compliance with security standards.
• Understanding of risk management principles and their application in security audits.
• Knowledge of compliance frameworks like ISO 27001, SOC 2, or similar, and their implementation within enterprise environments.
• Experience with audit tools and software used for planning, executing, and documenting audits.
• Experience in writing a comprehensive audit reports.