Freelance Auditor 27001 Slovenia

Job Description – Lead Auditor ISO 27001 (Freelance)

📋 POSITION

Lead Auditor ISO 27001 – Freelance (Slovenia-Based)

🎯 OVERVIEW

We are seeking an experienced and autonomous Lead Auditor ISO 27001 to support information security audit activities with clients in Slovenia and potentially across the wider geographic region. This is a freelance, call-based position with interventions scheduled according to agreed planning. Ideal for a seasoned professional with consolidated experience, operational flexibility, and the ability to manage complex audits independently.

📌 KEY RESPONSIBILITIES

Conduct ISO 27001 audits: Plan, execute, and report on information security compliance audits at client organizations

ISMS assessment: Verify implementation and effectiveness of Information Security Management Systems

Non-conformities and recommendations: Identify gaps, prepare detailed reports, and suggest improvement measures

Stakeholder communication: Pre-audit briefings, exit meetings, and results discussion with management and IT/Security teams

Documentation: Completion of checklists, evidence gathering, photography, and audit documentation per international standards

Operational flexibility: Availability for scheduled interventions and, if necessary, short-notice assignments according to planning requirements

👤 REQUIRED PROFILE

Experience and Certifications (Mandatory)

Lead Auditor ISO 27001 certification (IRCA, PECB, Exemplar Global, or equivalent recognized body)

Minimum 3 years of experience in ISO 27001 audits or ISMS

Experience conducting audits in Slovenian organizations (or familiarity with Slovenian/EU regulatory context)

Strong knowledge of ISMS, risk management, compliance, and information security governance

Technical Competencies

Deep knowledge of ISO/IEC 27001:2022 (and previous versions)

Familiarity with NIST Cybersecurity Framework, ISO 27002, ISO 27035 (incident management)

Experience with audit methodologies (sampling, evidence gathering, risk-based approach)

Ability to assess technical and organizational ISMS controls

Basic knowledge of IT environments, cloud infrastructures, data protection (GDPR)

Soft Skills

Autonomy and reliability: Ability to manage audits independently without constant supervision

Communication: Skill in presenting complex findings clearly to different management levels

Flexibility: Availability for scheduled interventions with short notice

Problem-solving: Capacity to adapt to heterogeneous organizational contexts

Professional integrity: Impartiality and confidentiality compliance

Language Requirements

Slovenian: Fluent (spoken and written) – Essential

English: Good level (for technical documentation and international communication)