Strategic ISMS & Assurance Leader

Aceve; Viseu; In loco; EUR 48.000 - 70.000; Tempo pieno

Descrizione del lavoro

Aceve in Portugal seeks an ISMS Lead to own ISO 27001 and related standards across multiple entities. You will manage evidence, drive audits, and ensure controls reflect policy with a risk-based approach.

You translate requirements into practical workflows for ISO 27001, NIS2 and the Cyber Resilience Act, coach teams through nonconformities, and coordinate audits to sustain certification and customer trust.

Competenze

• Hands-on experience running or auditing an ISO 27001 management system.
• Strong understanding of risk-based controls and evidence handling.
• Experience with NIS2 or Cyber Resilience Act helpful.

Mansioni

• Drive the policy review cycle and keep governing documents controlled and accessible
• Own the compliance evidence base and control monitoring, and ensure evidence reflects actual work
• Translate requirements into practical workflows: ISO 27001, NIS2 and Cyber Resilience Act, aligning controls to risk
• Keep one management system by mapping overlapping requirements into a single control set
• Coach through nonconformities with root cause analysis and proportionate corrective action
• Run internal audits and process sampling and report findings to the Steering Committee quarterly
• Coordinate external audits and certification, and prepare teams to explain their process and evidence
• Bring acquired companies into the ISMS and integrate them smoothly
• Own customer security assurance and respond to questionnaires with evidence
• Follow ISO 27001, NIS2, Cyber Resilience Act and ISAE 3402 postures
• Use audit results and incidents to drive improvements to Steering Committee and annual Management Review
• Operate the risk register day to day and perform supplier security risk assessments

Conoscenze

ISO 27001

Auditing

Policy implementation

Risk assessment

Stakeholder coaching

Formazione

Degree in information security / IT risk management

Equivalent practical experience

Descrizione del lavoro

Aceve in Portugal seeks an ISMS Lead to own ISO 27001 and related standards across multiple entities. You will manage evidence, drive audits, and ensure controls reflect policy with a risk-based approach.

You translate requirements into practical workflows for ISO 27001, NIS2 and the Cyber Resilience Act, coach teams through nonconformities, and coordinate audits to sustain certification and customer trust.