ISO 27001 Information Security Management Systems Auditor

Description

Are you motivated to work with **high technical quality standards**, where rigor and regulatory compliance make the difference? Are you looking for an environment where your **professional judgment and experience in information security** have a real impact on organizations across various sectors? At OCA Global, we are seeking an **ISO 27001 Information Security Management Systems Auditor**. **What will be your mission?** You will join the technical team ensuring that nothing is left to chance in information security, participating in ICT audits across multiple sectors and technological environments, with direct support from the Technical Management. **️ Your main day-to-day responsibilities** * Conduct information security audits in accordance with ISO/IEC 27001, ensuring compliance with requirements and proper evaluation of controls. * Analyze complex technological environments, assessing infrastructures, systems, and processes from both technical and regulatory perspectives. * Prepare clear and precise audit reports, providing robust, evidence-based conclusions. * Interact with clients and technical teams, explaining findings with rigor, professional judgment, and a focus on improvement. * Manage multiple audits simultaneously while maintaining high quality standards and meeting deadlines. * Knowledge of ENS (National Security Scheme) will be considered a strong asset. **What would we like to see in your profile?** * University degree or equivalent (university-level vocational training), preferably in ICT or information security, required to understand complex technological environments. * Specific training in auditing, accredited by IRCA, ISO 19011, master’s programs, postgraduate courses, or specialized training—essential to ensure structured audits aligned with international standards. * Minimum two years’ professional experience in information security, risk management, ICT audits, or technical consulting, ensuring autonomy and sound judgment in execution. * Proven knowledge and experience with ISO/IEC 27001, fundamental for performing this role. * Professional certifications such as ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, CEH, or official ENS training from CCN, validating your technical specialization. * Knowledge of infrastructure and cybersecurity: networks, firewalls, access controls, data centers (CPDs), virtualization, cloud, EDR/XDR, business continuity, or forensic analysis. * Technical rigor and analytical capability—essential when working with demanding standards. * Communication and client-facing skills, to convey conclusions clearly and authoritatively. * Autonomy and accountability, with willingness to travel occasionally as required by audits. **Why join our project?** * You will work in a specialized technical environment where quality and regulatory compliance are top priorities. * You will enjoy a variety of projects and sectors, avoiding monotony and continuously broadening your experience. * You will benefit from professional autonomy, with clear objectives and constant technical support. * You will become part of a highly knowledgeable and collaborative team where mutual support is key. * Working hours: Monday to Thursday, 8:30 a.m. to 6:00 p.m.; Friday, 8:30 a.m. to 3:30 p.m. Intensive schedule in July and August, and all days before public holidays. Christmas Eve and New Year’s Eve are non-working days. * Flexible compensation: transportation, meal allowance, health insurance, childcare vouchers, and training. * Access to OCA Benefits, an employee discount portal. * OCA Campus, offering technical and professional development training. * Open communication culture via Happyforce, social initiatives through LOCAL Initiative, and the “Recommend OCA” referral program. **Who are we?** OCA Global is an international group specializing in inspection, testing, consulting, training, and certification. Our purpose is clear: **leaving nothing to chance and guaranteeing maximum safety and trust in people’s daily lives through responsible management**. If you identify with an environment where technical rigor, precision, and accountability make the difference, **we want to meet you**. \#LI\-JM1