Digital Trust Lead Auditor

• Conduct third party assessments of Information Security and associated management systems in accordance with BSI requirements and ISO/IEC standards.
• Evaluate information security controls-technical, organisational, procedural-and determine their effectiveness and alignment with risk management objectives.
• Communicate assessment outcomes to clients, ensuring clear understanding of decisions and required corrective actions.
• Recommend issuance, continuation, suspension, or withdrawal of certificates in line with BSI certification processes and governance requirements.
• Build strong, trusted relationships with client stakeholders, including CISOs, Data Protection Officers, IT leadership teams, and operational management.
• Support clients in understanding how security, governance, risk, and compliance improvements strengthen business resilience and performance.
• Identify opportunities to enhance client satisfaction and support business development initiatives through value added insights.

Requirements

• Demonstrable third party audit or assurance experience.
• Minimum two years of industry experience in Information Security, IT governance, risk management, data protection, cybersecurity, or related technical environments.
• Strong knowledge of management system frameworks, particularly ISO/IEC 27001 and related security standards.
• Ability to interpret technical environments (cloud, networks, applications, data flows) and map them to management system and risk requirements.
• Experience producing detailed, high quality reports that explain complex issues clearly.
• Sector specific security qualifications or recognised industry credentials (e.g., CISSP, CISM, CISA, ISO/IEC 27001 Lead Auditor) (Desirable).
• Experience in Data Protection (e.g., GDPR, ISO/IEC 27701) (Desirable).
• Knowledge of cloud security frameworks or controls (e.g., ISO/IEC 27017/27018, CSA CCM) (Desirable).
• Awareness of Artificial Intelligence governance, risks, and ethical considerations (Desirable).
• Understanding of cybersecurity fundamentals and emerging threat landscapes (Desirable).

Core Competencies

Demonstrates expertise in conducting third party assessments of Information Security and management systems, with a strong focus on ISO/IEC standards and risk management. Capable of producing high quality reports and building trusted relationships with stakeholders to enhance client satisfaction and support business development.

Highest signal resume keywords

• Third-Party Audit Experience
• ISO/IEC 27001 Knowledge
• Information Security Management
• Data Protection Experience
• Cloud Security Frameworks

ATS Optimization Keywords Hard Skills

• Information Security
• Risk Management
• IT Governance
• Cybersecurity
• Management System Frameworks
• Technical Environment Interpretation
• Report Writing
• Data Protection
• Cloud Security Controls
• Emerging Threat Landscape Understanding

Soft Skills

• Communication
• Relationship Building
• Client Satisfaction Focus
• Analytical Thinking
• Problem Solving

Certifications & Qualifications

• CISSP
• CISM
• CISA
• ISO/IEC 27001 Lead Auditor

Industry Keywords

• BSI Requirements
• ISO/IEC Standards
• GDPR
• ISO/IEC 27701
• ISO/IEC 27017
• ISO/IEC 27018
• CSA CCM
• Artificial Intelligence Governance