ISO 27001 Auditor

Company Description Advanced Assessment Services (AAS) is a Bangladesh-based ISO certification body affiliated company that has been working with top certification body partner since 2012. The organization provides ISO 9001, 14001, 22000, 45001, and 27001 certifications to large, medium, and small enterprises across diverse sectors, including banking, garments, pharmaceuticals, NGOs, trading, construction, education, consulting, IT, and manufacturing. More than 200 companies have already been certified by AAS, building a strong track record and reputation in the local market. AAS employs highly experienced ISO auditors with extensive backgrounds in leading organizations and collaboration with international auditors, ensuring rigorous and insightful audits. The company emphasizes accessible, timely services and offers educational resources to help organizations understand ISO requirements and certification processes.

Role Description The ISO 27001 Auditor will perform part-time, on-site audits at client organizations in Dhaka, Bangladesh, assessing information security management systems against ISO 27001 requirements. Responsibilities include planning audit engagements, reviewing documentation, conducting interviews, examining controls and processes, and identifying nonconformities and areas for improvement. The auditor will prepare clear audit reports, communicate findings to client stakeholders, and provide recommendations aligned with ISO 27001 and related best practices. The role also involves supporting clients in maintaining certification readiness, staying current with relevant standards and regulatory expectations, and collaborating with other auditors and team members to ensure consistent audit quality.

Qualifications

• Information security and ISO 27001 expertise, including knowledge of ISMS design, risk assessment, controls implementation, and compliance with ISO 27001 requirements.
• Auditing and assessment skills, such as planning audits, conducting interviews, reviewing evidence, documenting findings, and reporting nonconformities in a structured manner.
• Analytical and problem-solving abilities to interpret complex processes, evaluate control effectiveness, and propose practical improvement actions.
• Communication and interpersonal skills for engaging with diverse client teams, explaining standards, and presenting audit outcomes in a clear, professional manner.
• Relevant professional certifications (e.g., ISO 27001 Lead Auditor, CISA, CISSP, or similar) and experience auditing or implementing ISO standards in organizations.
• Bachelor’s degree in information security, IT, engineering, business, or a related field, or equivalent professional experience.
• Ability to work independently on-site, manage time effectively in a part-time capacity, and adapt to different organizational cultures and industries.
• Familiarity with other ISO standards (e.g., ISO 9001, 14001, 45001, 22000) is an advantage, as is experience with Bangladeshi organizations and local regulatory