ISO/IEC 27001 Project Manager - Permanent

Context

We are looking for an experienced ISO/IEC 27001 Project Manager to lead and coordinate the implementation, certification, and ongoing improvement of an Information Security Management System (ISMS). In this role, you will be responsible for driving the ISO 27001 program end-to-end: from gap analysis and roadmap definition to certification support and continuous compliance. You will work closely with IT, security, risk, compliance, and business stakeholders to ensure information security controls are effectively designed, implemented, and embedded across the organization.

Missions

• Lead the implementation and maintenance of an ISO/IEC 27001-compliant ISMS
• Plan, execute, and monitor the ISO 27001 program, including scope definition, milestones, timelines, and dependencies
• Coordinate certification and surveillance audits with external auditors
• Conduct or coordinate gap analyses, risk assessments, and maturity assessments
• Ensure alignment with related frameworks and regulations (e.g. NIS2, DORA, GDPR, internal security policies)
• Maintain core ISMS documentation (policies, procedures, risk register, Statement of Applicability, improvement plans)
• Act as the central point of contact for ISO 27001 across IT, business, and audit stakeholders
• Support control owners in implementing and evidencing security controls
• Drive awareness and adoption of information security practices across teams
• Monitor ISMS performance and define improvement initiatives
• Track non-conformities, corrective actions, and management actions
• Prepare management reporting and support management reviews

Tools & Environment

• ISO/IEC 27001 implementation and certification processes
• ISMS concepts: risk management, Annex A controls, Statement of Applicability, internal audits
• Related standards or frameworks: ISO 22301, ISO 27701, COBIT, ITIL
• European regulatory frameworks: NIS2, DORA, GDPR
• Collaboration with auditors, regulators, and internal assurance teams
• Complex, regulated environments, including large or financial institutions

Working Conditions

• Role focused on information security, risk, and compliance project/program management
• Interaction with cross-functional teams including IT, security, risk, compliance, and business stakeholders
• Emphasis on documentation, structured processes, and continuous improvement initiatives