Senior ISO Consultant

Requirements

• Conduct organisational gap assessment across all standards
  
• Design integrated management system (IMS) architecture
  
• Define implementation roadmap and certification strategy
  
• Align standards to a single unified policy and control framework
  
• Prepare organisation for UKAS accredited external audits
  

• Risk assessment and treatment methodology
  
• Asset inventory and classification framework
  
• Access control and identity governance
  
• Supplier security controls
  
• Secure development lifecycle
  
• Incident response procedures
  
• Security awareness programme
  

• IT service management lifecycle design
  
• Incident, problem and change management processes
  
• SLA and service reporting framework
  
• Configuration and release management governance
  
• Service desk operational procedures
  

• Business Impact Analysis (BIA)
  
• Disaster recovery and continuity planning
  
• Crisis management framework
  
• Testing and simulation exercises
  

• Process ownership model
  
• Quality metrics and continual improvement
  
• Audit and corrective action management
  
• Document lifecycle governance
  

• Environmental impact register
  
• Supplier and operational environmental controls
  
• Sustainability objectives and monitoring
  

• Prepare Stage 1 and Stage 2 audit readiness
  
• Conduct internal audits
  
• Manage non -conformities and remediation
  
• Support certification body interactions
  
• Achieve certification
  

• Integrated Management System (single framework for all standards)
  
• Policies, procedures and control library
  
• Risk registers and compliance records
  
• Internal audit programme
  
• Evidence repositories
  
• Staff awareness training
  
• Successful certification audits
  

• 7+ years implementing ISO standards in technology organisations
  
• Demonstrated successful certification delivery (not advisory only)
  
• Experience with UKAS -accredited certification bodies
  
• Experience with SaaS / cloud / software engineering companies
  
• Strong understanding of IT operations and service delivery
  

• ISO/IEC 27001 implementation leadership
  
• Multi -standard integrated management systems
  
• Risk management methodologies
  
• Audit preparation and remediation
  
• Documentation and operational alignment
  
• Stakeholder facilitation across technical teams
  

• ISO 27001 Lead Implementer or Lead Auditor
  
• ISO 20000 Lead Auditor / Implementer
  
• ISO 22301 Implementer
  
• ITIL Foundation or above
  

• Within the engagement period the consultant is expected to:
  
• Establish operational governance framework
  
• Train internal stakeholders
  
• Conduct internal audits
  
• Achieve certification for agreed standards
  
• Enable internal team to maintain compliance post -engagement
  

• Able to work with engineering and delivery teams
  
• Pragmatic and implementation -focused
  
• Strong documentation clarity
  
• Comfortable interacting with senior leadership
  
• Experience working with international teams