ISO 27001 Consultant Surveillance Audit Remediation (Contract / Remote)

Role title: ISO/IEC 27001:2022 Remediation Lead – ISMS Surveillance Audit Preparation

Start Date: ASAP (Remediation to be complete ahead of 16–18 November 2026)

IR35 Status: Inside IR35

Rate: £550 per day

Location: Preferable 1 day per week in Glasgow office, but open to negotiation location dependent

All proposals will be reviewed directly by the hiring manager on the Gigged AI platform. In order to sign up and send a proposal, please follow the below steps 

• head to app.gigged.ai and create your free talent profile
• once your profile has been completed, follow this link to the project - https://app.gigged.ai/find-a-gig/RKvjrnyjLod
• you will now see a 'submit proposal' button
• please fill this in (intro, relevant experience, and attach CV to this)

Overview:
Lead and coordinate remediation activities arising from an independent assurance review, and prepare the Information Security Management System (ISMS) for ISO/IEC 27001:2022 Surveillance Audit 2.

The focus is on addressing control weaknesses, strengthening governance and evidencing the effective operation of the ISMS ahead of the LRQA surveillance visit scheduled for 16–18 November 2026.

This role operates independently of day-to-day control ownership, working with business, technology and cyber security stakeholders to drive corrective actions to completion. As independent review activity, it should be undertaken by competent personnel independent of the areas under review.

Key responsibilities:
Coordinate closure of audit findings and opportunities for improvement.

Enhance the effectiveness of operational security controls. Support Management

Review and surveillance preparation activities. Produce auditor-ready documentation, including evidence packs suitable for external auditor inspection.

Experience required:

ISO/IEC 27001:2022 Lead Auditor or Lead Implementer experience is preferred.

Strong knowledge of ISO/IEC 27001:2022 Clauses 4–10 and the associated controls is required, along with significant ISMS remediation experience, including re-certification support and surveillance audits.

Candidates should be comfortable producing auditor-ready documentation to a standard suitable for external inspection.

Engagement window: Remediation to be complete ahead of 16–18 November 2026 (LRQA Surveillance Audit 2)