AI Governance Lead Auditor (ISO/IEC 42001)

WE ARE HIRING

AI Governance Lead Auditor (ISO/IEC 42001)

About Us

RSI Security is a leader in cybersecurity compliance and conformity assessment. We operate an independent Certification Body (CB) aligned with ISO/IEC 17021-1 requirements and are currently pursuing accreditation for ISO/IEC 42001 (Artificial Intelligence Management Systems).

We maintain strict separation between our certification and advisory entities to protect the integrity and independence of every audit. Our mission is to build a rigorous, globally respected AI governance certification program that ensures AI Management Systems (AIMS) are assessed with impartiality and technical depth.

About the Role

As an AI Governance Lead Auditor, you will lead independent certification audits of client Artificial Intelligence Management Systems (AIMS) against ISO/IEC 42001. This is a dedicated Certification Body role and is distinct from consulting, advisory, or implementation activities. You will lead audit teams in evaluating complex AI lifecycles, including training, validation, deployment, monitoring, and decommissioning.

Your role is to evaluate objective evidence and determine conformity to ISO/IEC 42001 requirements. Audit conclusions directly inform the independent Certification Decision process. Certification decisions are made by a separate, authorized function to preserve impartiality and comply with ISO/IEC 17021-1 requirements. Depending on competence and authorization status, this role may also include service as an independent Certification Decision Maker for engagements in which the individual did not participate as an auditor.

What You’ll Do

• Lead Rigorous Certification Audits: Plan and execute Stage 1 and Stage 2 audits, applying the specialized requirements of ISO/IEC 42006. This includes risk-based sampling and the evaluation of AI risk management integration (ISO/IEC 23894).
• Navigate the AI Lifecycle: Assess governance effectiveness across the entire AI pipeline, identifying and grading nonconformities with precision and technical depth.
• Uphold Impartiality Guardrails: Operate under RSI’s formal impartiality controls. This includes strict adherence to "cooling-off" periods for former advisory clients and regular conflict-of-interest attestations to safeguard the CB’s independence.
• Engage with Accreditation Oversight: Participate in periodic accreditation body witness audits, demonstrating audit methodology and technical competence under external oversight as part of our accredited certification activities.

Competence & Authorization

Authorization to perform audits at RSI is a formal status granted through our documented competence evaluation and authorization framework. Candidates will undergo a structured review of:

• Technical Domain Expertise: Proven knowledge of AI architectures, data governance, and model validation.
• Standard Mastery: Proficient application of ISO/IEC 17021-1, 42001, and 42006.
• Performance Monitoring: Continuous authorization is maintained through ongoing performance monitoring, including workpaper reviews and witnessed audit evaluations.

What You’ll Bring

• Experience: 7+ years in GRC, cybersecurity, or management system assessment. Proven experience leading audit teams and managing complex client stakeholders is essential.
• Certifications: ISO/IEC 4200