[Hiring] ISMS Manager @Intelance

Role Description

We are appointing an experienced ISMS Manager as an associate contractor to run client ISMS programmes day to day.

Your first assignment is an ISO/IEC 27001:2022 certified technology company with offices in the UK and Asia. The work runs from December 2026 through their surveillance audit in April 2027, then continues monthly. Expect about 4 to 6 days a month at the start, settling to 2 to 3 days a month. You will report to our Cyber Assurance lead, who stays accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Run the client's ISMS day to day inside Vanta and Notion.
• Close open audit non-conformities with evidence the certification body will accept.
• Keep the risk register, risk treatment plan and Statement of Applicability up to date.
• Run supplier security assessments and keep supplier records current.
• Track and chase control owners so policies, training, access reviews and device checks are done on time.
• Prepare and run the management review with the client's leadership.
• Support the independent internal audit and close any findings it raises.
• Prepare the client for the surveillance audit and support them on the day.
• Report progress each month in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Qualifications

• At least three years running or maintaining an ISO 27001 ISMS.
• Taken at least one organisation through an ISO 27001 certification or surveillance audit.
• Hands on experience with Vanta, or a similar platform such as Drata or Secureframe.
• Good working knowledge of ISO/IEC 27001:2022 and the 2022 Annex A controls.
• Experience with cloud based or SaaS businesses using Google Workspace or Microsoft 365.
• Able to keep busy engineers and leaders on track without slowing their work.
• Clear, concise writing that non technical leaders understand.
• Based in the UK and able to work as a self-employed contractor.

Requirements

• ISO/IEC 27001 Lead Implementer or Lead Auditor certificate (Desirable).
• Experience with UK GDPR records of processing and data protection impact assessments (Desirable).
• Experience with companies that have offices in more than one country (Desirable).
• Experience with SOC 2 alongside ISO 27001 (Desirable).

Benefits

• Join Intelance's specialist cyber assurance associate panel.
• Steady monthly work on a managed ISMS service that is growing.
• Remote work with a written scope, timetable and agreed day rate.
• Support from an experienced assurance team, with structured templates and quality review.
• Flexible, project based work you can fit around other commitments.