Cybersecurity Internal Auditor
Free to start · No card · 5 credits the moment you sign up
Job description
1099 Contractor Opportunity
Cybersecurity Internal Auditor (ISO 27001, ISO 27701, ISO 42001)
Position Overview
We are seeking an experienced Cybersecurity Internal Audit Consultant (1099 Contractor) to perform independent internal audits of information security, privacy, and AI management systems. The consultant will be responsible for assessing organizational compliance against multiple management system standards, identifying gaps, evaluating control effectiveness, and providing actionable recommendations to support certification readiness and continual improvement.
This role is ideal for an experienced auditor who has performed internal audits for organizations pursuing or maintaining certifications such as ISO 27001, ISO 27701, ISO 42001, and related cybersecurity and compliance frameworks.
Engagement Type
- Independent Contractor (1099)
- Remote with occasional virtual meetings
- Project-based with opportunity for recurring engagements
- Flexible scheduling based on audit plans and certification timelines
Key Responsibilities
- Plan and execute internal audits against:
- ISO/IEC 27001 Information Security Management Systems (ISMS)
- ISO/IEC 27701 Privacy Information Management Systems (PIMS)
- ISO/IEC 42001 Artificial Intelligence Management Systems (AIMS)
- Additional standards and frameworks as applicable
- Review policies, procedures, standards, risk assessments, and supporting documentation.
- Assess operational effectiveness of security, privacy, and AI governance controls.
- Conduct interviews with stakeholders, control owners, and process owners.
- Validate evidence supporting compliance requirements.
- Identify nonconformities, observations, and opportunities for improvement.
- Develop detailed audit reports, findings, and corrective action recommendations.
- Present audit results to leadership and management teams.
- Assist with remediation validation and follow-up assessments.
- Provide guidance on audit preparedness and continual improvement activities.
Required Qualifications
- ISO 27001 Lead Auditor certification.
- ISO 27701 auditing experience.
- ISO 42001 auditing experience.
- Experience conducting cybersecurity, privacy, risk, or compliance audits.
- Demonstrated experience auditing against ISO management system standards.
- Strong understanding of:
- Information Security Governance
- Risk Management
- Access Control
- Incident Response
- Vendor Risk Management
- Privacy Programs
- AI Governance and Risk Management
- Experience interviewing stakeholders and evaluating control effectiveness.
- Excellent report writing, communication, and presentation skills.
- Ability to work independently and manage multiple audit engagements.
Preferred Qualifications
- Certified Information Systems Auditor (CISA).
- Certified Information Security Manager (CISM).
- Certified Information Systems Security Professional (CISSP).
- Certified Internal Auditor (CIA).
- Experience supporting accredited certification audits.
- Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.
Compensation
- Hourly or fixed-fee engagement depending on scope and experience.
- Competitive market rates commensurate with certifications and relevant audit experience.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for VISTRADA. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.