About the role
<p>Are you an experienced ISO/IEC 27001 Project Manager ready to lead end-to-end ISMS implementations and drive certification in a complex, regulated environment?</p><p>We are looking for an experienced <strong>ISO/IEC 27001 Project Manager</strong> to lead and coordinate the implementation, certification, and continuous improvement of our Information Security Management System (ISMS).</p><p>In this role, you will drive the ISO 27001 program end-to-end, from gap analysis and roadmap definition to certification and ongoing compliance. You will collaborate closely with IT, security, risk, compliance, and business stakeholders to ensure security controls are effectively designed, implemented, and embedded across the organization.</p>Role<p><strong>ISO 27001 Program Management</strong></p><ul><li>Lead the implementation and maintenance of an ISO/IEC 27001-compliant ISMS</li><li>Define scope, roadmap, milestones, timelines, and dependencies</li><li>Coordinate certification and surveillance audits with external auditors</li></ul><p><strong>Governance, Risk & Compliance</strong></p><ul><li>Conduct or coordinate gap analyses, risk assessments, and maturity assessments</li><li>Ensure alignment with frameworks and regulations (e.g. NIS2, DORA, GDPR)</li><li>Maintain ISMS documentation (policies, procedures, risk register, SoA, improvement plans)</li></ul><p><strong>Stakeholder & Change Management</strong></p><ul><li>Act as the central point of contact for ISO 27001 across stakeholders</li><li>Support control owners in implementing and evidencing controls</li><li>Drive awareness and adoption of information security practices</li></ul><p><strong>Continuous Improvement</strong></p><ul><li>Monitor ISMS performance and define improvement initiatives</li><li>Track non-conformities and corrective actions</li><li>Prepare management reporting and support management reviews</li></ul>
Profile<ul><li>Proven experience as a Project Manager or Program Manager in <strong>information security, risk, or compliance</strong></li><li>Hands-on experience with ISO/IEC 27001 implementation and/or certification</li><li>Strong knowledge of ISMS concepts (risk management, Annex A controls, SoA, audits)</li><li>Experience working with auditors, regulators, or internal assurance teams</li><li>Demonstrated ability to manage complex, cross-functional initiatives</li></ul><p> </p><p>Skills:</p><ul><li>Strong project management and organizational skills</li><li>Excellent stakeholder management and communication abilities</li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor certification</li><li>Experience with related frameworks (ISO 22301, ISO 27701, COBIT, ITIL)</li><li>Knowledge of European regulations (e.g. NIS2, DORA)</li><li>Experience in large or regulated environments (financial sector is a plus)</li><li>Structured, detail-oriented, and documentation-driven</li><li>Able to balance pragmatism with compliance requirements</li></ul>