ISO Cyber Security Consultant
A 1L Realization (Pty) Ltd
Johannesburg
On-site
ZAR 600 000 - 800 000
Full time
21 days ago
Job summary
A leading compliance consulting firm in Johannesburg seeks an experienced professional to assist with ISO/IEC 27001 implementation and audits. Responsibilities include gap analysis, remediation roadmaps, and audit readiness support. Candidates should have proven experience in ISO/IEC 27001 and strong documentation skills. Certification as an ISO 27001 Lead Implementer or Auditor is preferred.
Qualifications
- Proven experience with ISO / IEC 27001 implementation and audits.
- Familiarity with ISO / IEC 27002 : 2022 control framework.
- Strong documentation and stakeholder engagement skills.
Responsibilities
- Assist in review of gap analysis against ISO / IEC 27001 : 2022 requirements.
- Develop a remediation roadmap with prioritized actions.
- Conduct mock audits or readiness assessments.
Skills
ISO / IEC 27001 implementation
ISO / IEC 27002 control framework
Documentation skills
Stakeholder engagement
Education
ISO 27001 Lead Implementer or Auditor certification
Assessment Phase
- Assist in review of gap analysis against ISO / IEC 27001 : 2022 requirements.
- Review existing policies, procedures, and controls.
- Identify non-conformities and areas for improvement.
- Map current controls to Annex A controls (aligned with ISO / IEC 27002 : 2022).
Planning & Preparation
- Develop a remediation roadmap with prioritized actions.
- Assist in updating or drafting required documentation (e.g., ISMS policy, risk treatment plan).
- Support stakeholder engagement and awareness sessions.
- Coordinate with internal teams to ensure alignment with audit requirements.
Readiness Support
- Conduct mock audits or readiness assessments.
- Provide guidance on evidence collection and audit preparation.
- Support internal audit or pre-certification activities.
Deliverables
- Gap Analysis Report and Reviews
- Remediation Roadmap
- Updated ISMS Documentation
- Audit Readiness Checklist
- Weekly Progress Reports
Requirements
- Proven experience with ISO / IEC 27001 implementation and audits.
- Familiarity with ISO / IEC 27002 : 2022 control framework.
- Strong documentation and stakeholder engagement skills.
- Preferably certified (e.g., ISO 27001 Lead Implementer or Auditor).