ISO 27001 Consultant
Remote (UK) | £45,000-£55,000 + Excellent Benefits
Are you an experienced ISO 27001 professional looking for a varied consultancy role where you can make a genuine difference?
This is an excellent opportunity to join a growing specialist cyber security consultancy, helping organisations achieve and maintain recognised information security standards. You'll work with a diverse range of clients, including healthcare and medical technology businesses, supporting them with ISO 27001 implementation, Cyber Essentials and wider regulatory compliance.
Working remotely from home, you'll ideally be based within a few hours of South Yorkshire, with occasional travel to client sites when required.
You'll join an approachable, technically focused team, working closely with senior colleagues and directors. There is plenty of scope to develop your expertise, gain further professional certifications and take ownership of meaningful projects.
The Role
ISO 27001 implementation will be your primary responsibility, helping clients establish effective Information Security Management Systems (ISMS) and achieve ISO/IEC 27001:2022 certification.
You'll also contribute to the company's own ISO 27001 certification journey, giving you the opportunity to put your consultancy knowledge into practice internally.
Your responsibilities will include:
Conducting ISO 27001:2022 gap analyses, defining ISMS scope and identifying areas requiring improvement.
Carrying out information security risk assessments and developing risk treatment plans.
Creating and maintaining Statements of Applicability (SoA), security policies, procedures and supporting documentation.
Preparing clients for internal audits and external ISO 27001 certification assessments.
Helping organisations prepare for Cyber Essentials certification, including guidance on self-assessment questionnaires.
Working alongside senior consultants to facilitate client workshops, gather evidence, understand requirements and produce clear, professional deliverables.
Maintaining accurate, version-controlled and audit-ready documentation.
Leading the internal ISO 27001 implementation programme, working with the directors to establish the company's own ISMS and prepare for certification.
You'll work across several client engagements, gaining exposure to different industries, business environments and compliance challenges.
What We're Looking For
You'll need practical experience of implementing ISO 27001, ideally having taken at least one organisation through the process towards successful certification.
We're interested in people who combine sound technical knowledge with excellent documentation, communication and organisational skills.
Essential experience:
ISO/IEC 27001 Lead / Auditor or Implementer certification, or equivalent hands-on implementation experience.
Practical experience of ISO 27001 including risk assessments, ISMS documentation and certification preparation.
Excellent written English and the ability to produce clear, structured and professional documentation.
A methodical, organised approach, with good attention to detail.
Confidence participating in client workshops, interviews and evidence-gathering exercises.
UK-based, with full UK right to work and the ability to travel occasionally to client locations.
Desirable Experience
You don't need to have everything on this list, but experience in any of the following would be advantageous:
ISO 27001 Lead Auditor / Implementer certification.
Cyber Essentials or Cyber Essentials Plus.
ISO 9001 or other management system standards.
Consultancy experience, particularly managing documentation and deliverables across multiple client engagements.
Experience in medtech isn't essential. Training and support will be provided to help you develop your knowledge of the relevant healthcare and medical device requirements.
What's on Offer?
Salary of £45,000-£55,000, depending on experience.
Fully remote, home-based working anywhere in the UK.
Ideally located within a few hours of South Yorkshire for occasional client visits.
25 days' annual holiday, plus bank holidays.
Excellent training and professional certification budget.
Opportunity to develop specialist expertise across ISO 27001, healthcare compliance and cyber security assurance.
Direct exposure to senior consultants and company directors.
A varied consultancy position with genuine responsibility and opportunities to grow.
Interested?
If you're an ISO 27001 professional who enjoys working with clients, producing high-quality compliance documentation and helping organisations improve their security standards, we'd be keen to hear from you.
This is a particularly good opportunity for someone looking to build their consultancy career while developing expertise in the growing healthcare and medical technology cyber security market.
Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.
