How your CV stacks up
Upload your CV to see how well it fits this job role
?%
ISO 27001 Lead Auditor
Remote · Flexible contract · ISO/IEC 27001:2022
About Calibre
We're building an AI-native accredited certification body from the ground up: audits delivered remotely, in days not months, on our own platform. Founded by two ex-Palantir technical co-founders and backed by an oversubscribed $3.3M pre-seed from top-tier SF VCs. We're now standing up our ISO 27001 certification arm.
The role
You lead the audit. Stage 1, Stage 2, surveillance and recertification. Testing whether a company's ISO 27001 controls actually operate, with sampling you can defend to a CTO and to an accreditation assessor. You draft findings and reports inside our platform. As you deliver, you build your competence file with us and you help sharpen the machine you're auditing on.
This role carries more than fieldwork: you'll act as audit team leader in the witnessed audits during initial accreditation, perform application reviews, technical reviews and mentor the technical auditors coming up behind you.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you’ll do
- Lead remote Stage 1, Stage 2, surveillance and recertification audits end to end.
- Test ISO 27001 implementation against real evidence, live in the client's systems.
- Draft findings and audit reports in our custom platform; a human owns every finding.
- Sit in the audit-team-leader seat for witnessed audits.
- Perform application reviews and technical reviews.
- Mentor developing auditors and help improve our management system and audit workflows.
Must-haves
- Cloud and security infrastructure understanding. You can read an IAM policy, a Terraform plan, or an audit log and say what it actually does, enough to challenge cloud-era evidence (IAM, logging, CI/CD) rather than accept the summary.
- Certification-body experience. You've audited for an accredited CB. You know the discipline of the client file, impartiality, the decision firewall, NC lifecycles, and what an accreditation witness assessment feels like from the inside.
- ISO/IEC 27001:2022 lead auditor, current, with an audit log.
- Clear communication. You can synthesise complex technical findings into precise, actionable language, ensuring your audit reports remain transparent and defensible.
- Curious. You have a passion for understanding how modern, cloud-native architectures operate and a drive to challenge the status quo, constantly seeking better ways to leverage AI and automated tooling to enhance audit precision and efficiency.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
How to apply
Build your Auditor Passport, a structured professional profile for auditors that captures your schemes, certifications, training, audit history and sector breadth in about 10 minutes. Once created you can apply to this role and future roles at Calibre with a single click.
Build your Auditor Passport 👉 https://passport.calibre.ac/job
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location