ISMS Manager (ISO 27001 and Vanta)

Intelance; United States; Remote; USD 148,000 - 222,000; Part time

Benefits offered by this job

Remote work

Structured templates

Managed ISMS service

Flexible project-based work

Specialist panel

Job summary

Intelance is seeking an experienced ISMS Manager to run client ISMS programmes day to day using Vanta/Notion, maintaining risk registers and supporting audits.

The role is remote, associate contractor, with a written scope and day rate. Initial assignments run from December 2026 to the April 2027 surveillance audit, then continue monthly with 2–3 days per month ongoing.

Qualifications

• At least three years running or maintaining an ISO 27001 ISMS.

Responsibilities

• Run the client's ISMS day to day inside Vanta and Notion.
• Close open audit non-conformities with evidence the certification body will accept.
• Keep the risk register, risk treatment plan and Statement of Applicability up to date.
• Run supplier security assessments and keep supplier records current.
• Track and chase control owners so policies, training, access reviews and device checks are done on time.
• Prepare and run the management review with the client's leadership.
• Support the independent internal audit and close any findings it raises.
• Prepare the client for the surveillance audit and support them on the day.
• Report progress each month in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Skills

ISMS management

ISO 27001

Vanta

Drata

Secureframe

Policy writing

Risk management

Audit coordination

Cloud/SaaS familiarity

Self-employed contractor

Tools

Vanta

Drata

Secureframe

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies, so their engineers can stay focused on their product. We are appointing an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day.

Your first assignment is an ISO/IEC 27001:2022 certified technology company with offices in the UK and Asia. The work runs from December 2026 through their surveillance audit in April 2027, then continues monthly. Expect about 4 to 6 days a month at the start, settling to 2 to 3 days a month. You will report to our Cyber Assurance lead, who stays accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Run the client's ISMS day to day inside Vanta and Notion.

• Close open audit non-conformities with evidence the certification body will accept.

• Keep the risk register, risk treatment plan and Statement of Applicability up to date.

• Run supplier security assessments and keep supplier records current.

• Track and chase control owners so policies, training, access reviews and device checks are done on time.

• Prepare and run the management review with the client's leadership.

• Support the independent internal audit and close any findings it raises.

• Prepare the client for the surveillance audit and support them on the day.

• Report progress each month in plain English, with clear actions, owners and dates.

• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Requirements

Essential

• At least three years running or maintaining an ISO 27001 ISMS.

• Taken at least one organisation through an ISO 27001 certification or surveillance audit.

• Hands on experience with Vanta, or a similar platform such as Drata or Secureframe.

• Good working knowledge of ISO/IEC 27001:2022 and the 2022 Annex A controls.

• Experience with cloud based or SaaS businesses using Google Workspace or Microsoft 365.

• Able to keep busy engineers and leaders on track without slowing their work.

• Clear, concise writing that non technical leaders understand.

• Based in the UK and able to work as a self-employed contractor.

Desirable

• ISO/IEC 27001 Lead Implementer or Lead Auditor certificate.

• Experience with UK GDPR records of processing and data protection impact assessments.

• Experience with companies that have offices in more than one country.

• Experience with SOC 2 alongside ISO 27001.

Benefits

• Join Intelance's specialist cyber assurance associate panel.

• Steady monthly work on a managed ISMS service that is growing.

• Remote work with a written scope, timetable and agreed day rate.

• Support from an experienced assurance team, with structured templates and quality review.

• Flexible, project based work you can fit around other commitments.