Cybersecurity Internal Auditor (ISO 27001)

Location: United States; remote with occasional virtual meetings

Company

hirify.global provides cybersecurity, privacy, and AI management system audit consulting for certification readiness and continual improvement.

What you will do

• Plan and execute internal audits against ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, and applicable cybersecurity and compliance frameworks.
• Review policies, procedures, risk assessments, and supporting documentation.
• Assess the operational effectiveness of security, privacy, and AI governance controls.
• Interview stakeholders, control owners, and process owners and validate compliance evidence.
• Identify nonconformities, observations, and improvement opportunities.
• Prepare audit reports, present findings to leadership, and support remediation validation and follow-up assessments.

Requirements

• ISO 27001 Lead Auditor certification required.
• Experience auditing ISO 27701 and ISO 42001 management systems.
• Experience conducting cybersecurity, privacy, risk, or compliance audits.
• Strong knowledge of information security governance, risk management, access control, incident response, vendor risk management, privacy programs, and AI governance.
• Experience interviewing stakeholders and evaluating control effectiveness.
• Excellent report writing, communication, presentation, independent working, and engagement management skills.

Nice to have

• CISA, CISM, CISSP, or CIA certification.
• Experience supporting accredited certification audits.
• Knowledge of NIST CSF, NIST AI RMF, SOC 2, HITRUST, PCI DSS, or similar frameworks.

Culture & Benefits

• Independent contractor engagement under a 1099 arrangement.
• Project-based work with opportunities for recurring engagements.
• Flexible scheduling based on audit plans and certification timelines.
• Hourly or fixed-fee compensation depending on scope and experience.
• Remote work with occasional virtual meetings.