IT Internal Auditor

Operate and maintain the company's Information Security Management System (ISMS) for an organization of approximately 300 employees in compliance with ISO/IEC 27001:2022 standards.
Develop, update, and manage all ISMS documentation, including policies, procedures, Statement of Applicability (SoA), risk register, risk treatment plan, and evidence repositories.
Conduct periodic information security risk assessments; maintain and update the risk register and risk treatment plan; monitor ISMS risk indicators and provide early warnings when thresholds are exceeded.
Plan and perform regular ISMS internal audits (every 3-6 months), including preparing audit checklists, documenting findings, and tracking corrective and preventive actions (CAPA) through closure.
Lead the annual ISO 27001 certification renewal process, including evidence preparation, coordination with certification bodies for external and surveillance audits, and follow-up on nonconformities until closure.
Organize information security awareness programs for all employees, including onboarding training; participate in information security incident analysis and response activities when required.
Collaborate with IT, HR, and the Board of Directors on security-related controls such as access control, physical security, supplier management, and asset management.
Participate in project process compliance audits as assigned by the PQA Leader; identify nonconformities and monitor improvement actions.
Proactively identify and escalate project issues and risks related to schedule, quality, and resource management; support project teams in resolving challenges.
Prepare periodic reports on project progress, quality, issues, and risks for management and department heads.