ISO/IEC 27001 Lead Implementer (Freelance)

Company Description
AuditLens.co provides teams with real-time visibility into their risk posture, enabling engineering and product teams to focus on building while maintaining continuous and verifiable compliance. The platform is designed to keep compliance “always on,” reducing manual overhead and streamlining audit readiness. By integrating risk and compliance monitoring into day-to-day operations, AuditLens.co helps organizations manage security and regulatory requirements more efficiently. Applicants joining AuditLens.co will collaborate with a modern, technology-driven environment focused on automation, transparency, and scalable risk management.
Role Description
This is a remote, contract role for an ISO/IEC 27001 Lead Implementer (Freelance).
The professional in this position will guide the design, implementation, and maintenance of ISO/IEC 27001-compliant Information Security Management Systems (ISMS) for clients using the AuditLens.co platform. Day-to-day tasks include performing gap analyses, defining scope and risk assessment methodologies, drafting and reviewing security policies and procedures, and advising stakeholders on control implementation. The role also involves preparing organizations for certification audits, supporting evidence collection and documentation, and collaborating with engineering and compliance teams to align technical controls with ISO/IEC 27001 requirements. The implementer will work independently, managing project timelines and deliverables while communicating clearly with client teams and internal stakeholders.
Qualifications
Strong ISO/IEC 27001 expertise, including experience leading ISMS implementation, conducting gap assessments, and managing certification or surveillance audits.
Knowledge of information security controls and frameworks (e.g., ISO 27002, NIST, SOC 2), risk assessment methodologies, and practical application of security best practices.
Proficiency in documentation and policy development, including drafting security policies, procedures, risk treatment plans, Statement of Applicability, and audit-ready evidence.
Experience working in remote, cross-functional environments with engineers, product teams, and compliance stakeholders to translate requirements into actionable controls.
Strong analytical, problem-solving, and communication skills, with the ability to explain complex security concepts in clear, accessible terms.
Relevant certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM, or equivalent practical experience are highly beneficial.
Background in SaaS, cloud infrastructure, or technology-driven organizations, and familiarity with continuous compliance or GRC platforms is a plus.
Ability to work independently as a freelancer, manage multiple client engagements, and deliver work on time and to a high standard of quality.

Work arrangement
Yes