ISMS & Assurance Lead - Compliance & Audit

Aceve; Lisboa; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Aceve is seeking an experienced information security professional to own and operate our ISMS, aligning with ISO 27001, NIS2, and the Cyber Resilience Act, and driving evidence gathering across multiple countries.

You will lead audits, manage nonconformities, coach teams, and ensure the evidence base supports external audits and customer requests; a pragmatic, policy-to-practice mindset is essential.

Competenze

• Hands-on experience running or auditing ISO 27001 management systems, including evidence, nonconformities, corrective action and audits.
• Solid grasp of quality management principles: PDCA, root-cause analysis and continual improvement.
• Working knowledge of NIS2 and cyber risk frameworks.
• Experience with ISAE 3402 or similar assurance reporting across entities or countries.
• Ability to manage multiple deadlines and report gaps clearly.

Mansioni

• Drive the policy review cycle and keep governing documents controlled and accessible.
• Own the compliance evidence base and control monitoring, ensuring evidence reflects actual practice.
• Translate requirements into working practices and advise teams on meeting ISO 27001, NIS2, and the Cyber Resilience Act.
• Map overlapping requirements into a single control set for unified compliance.
• Coach through nonconformities with root cause analysis and proportionate corrective actions.
• Run internal audits and process sampling to validate controls and inform leadership.
• Coordinate external audits and certifications, guiding teams to present evidence confidently.
• Onboard acquired companies into the ISMS and integrate with existing controls.
• Manage customer security assurance and respond to questionnaires with the evidence base.
• Follow posture for ISO 27001, NIS2, the Cyber Resilience Act and ISAE 3402 reports.
• Use audit results to identify weaknesses and drive improvements with governance.
• Operate the risk register day-to-day and perform supplier security risk assessments.

Conoscenze

ISO 27001

NIS2

ISMS

Audit experience

Risk assessment

Formazione

Degree in information security

Descrizione del lavoro

Aceve is seeking an experienced information security professional to own and operate our ISMS, aligning with ISO 27001, NIS2, and the Cyber Resilience Act, and driving evidence gathering across multiple countries.

You will lead audits, manage nonconformities, coach teams, and ensure the evidence base supports external audits and customer requests; a pragmatic, policy-to-practice mindset is essential.