ISO 27001 Implementation Consultant - Remote - Offshore - JOBID786

Outcome Logix ( A Tech 50 Finalist company 2025 and 2022, by Pittsburgh Technology Council ); India; Remote; INR 2,600,000 - 4,200,000; Full time

Job summary

Outcome Logix is seeking a seasoned ISMS program leader to validate and operationalize ISO 27001 foundations, aligning with TISAX and other controls. You will coordinate with IT, manufacturing, and business units to close gaps, maintain evidence, and drive readiness for certification.

The role emphasizes scope definition, risk treatment, evidence repositories, and coordinating with certification bodies to ensure rigorous audit readiness across multiple sites and processes.

Qualifications

• Experience leading cross-functional security or compliance programs across multiple sites.
• Operationalizing ISO 27001 ISMS foundation through audit readiness, gap validation, risk treatment, and evidence repositories.
• Business partnership with manufacturing plants, Facilities, HR/Privacy, Legal, Procurement, IT teams and certification bodies.

Responsibilities

• Scope and plan the ISMS workstream, defining milestones and evidence requirements.
• Validate ISO 27001 clauses against existing TISAX assessments and maintain remediation plans.
• Design/operationalize risk assessment, complete SoA, confirm policy ownership and evidence repository.
• Coordinate control delivery across infrastructure, ERP, plant systems, identity, vendors, and physical protection.
• Prepare certification readiness, internal audit, management review, and corrective actions; track findings through closure.
• Coordinate certification body selection and audits, and drive remediation with accountable owners.

Skills

ISO 27001

Security leadership

Risk assessment

Audit readiness

Tools

ServiceNow CMDB

Job description

Validate and operationalize the existing ISO 27001 and TISAX ISMS foundation. Build on the policies, procedures, methodologies, templates, assessments, and remediation plans already prepared. Complete missing ISO 27001 deliverables, coordinate business and technology control owners, establish repeatable evidence of control operation, and prepare the organization for certification while aligning with security governance.

Scope and reporting

• Work remotely with availability overlapping the US Eastern workday through at least 12 pm Eastern.Partner with IT and business functions.
• Confirm and document the initial certification scope before a detailed partner RFP or audit commitment. Validate in-scope sites, systems,processes, data, third parties, corporateIT, critical ERP and engineering applications, plant systems, exclusions, interfaces, and dependencies. Use the existing TISAX/ISO 27001 remediation action plan, management briefing, and readiness report as the implementation baseline.
• Use established Quality and audit practices where applicable. Focus the initial assignment on ISO 27001;other certification programs will follow.

Key responsibilities

• Scope and plan. Confirm and control the scope and implementation plan, building on the existing action plan. Define workstream ownership, priorities, milestones, dependencies, acceptance criteria, evidence requirements, decision points, and reporting cadence through readiness and certification audits.
• Assessment. Validate ISO 27001 clauses and applicable Annex A controls against the existing TISAX assessment and evidence. Maintain one prioritized gap, risk, and remediation plan with accountable owners,due dates, closurecriteria, and verification evidence.
• ISMS design. Validate and operationalize the existing risk assessment and treatment method,complete the risk register and Statement of Applicability, confirm policy and control ownership, reconcile document status, and establish a controlled evidence repository. Existing documents should be reviewed and improved rather than recreated by default.
• Control delivery. Coordinate implementation across infrastructure, cybersecurity, ERP and plant systems, identity, vendors, physical protection, mobile IT, projects,and business processeswithout displacing operational control owners. Prioritize asset and CMDB ownership, access governance, physical protection, third-party security, and repeatable evidence.
• Assurance. Prepare ISO 27001 awareness activities, internal audit, management review, corrective actions, and evidence of control operation. Integrate with existing ITGC,SOX, IATF, TISAX,penetration-test, resilience, and other applicable evidence, and verify that findings are tracked through closure and retest.
• Certification. Coordinate certification-body selection, readiness reviews,and Stage 1 and Stage 2 audits.Maintain the assessor request log, prepare control owners for interviews, track findings, and drive corrective-action closure and verification with accountable owners and the certification body.
• Partners. Assess a focusedshortlist of specialist partners, starting with existing quality and certification relationships; use remote work where effective and site visits where necessary.

Experience and capabilities

Leadership

Has led cross-functional security or compliance programs across multiple sites, with clearownership, practical prioritization and executive reporting.

ISO 27001 practice

Experience operationalizing an existing ISO 27001 ISMS foundation through audit readiness, including gap validation, risk treatment, Statement of Applicability, control implementation, evidence repositories, internal audit, management review, corrective action, and Stage 1 and Stage 2 support.

Business partnership

Can work with manufacturing plants, Facilities, HR/Privacy, Legal, Procurement, corporate functions, IT teams, stakeholders, consultants, operational control owners, and certification bodies while preserving internal accountability.

Advantageous

Experience with manufacturing or operational technology boundaries, ERP and plant systems, ITGC, ServiceNow CMDB, identity and access governance, supplier security, physical protection, mobileIT, privacy/PII integration, and existing quality management systems.