Information Security Management Systems Auditor

Location: USA

Job Description

We exist to create positive change for people and the planet. Join us and make a difference too!

• Deliver BSI’s audit services to assigned clients in compliance with BSI, scheme, and regulatory requirements

• Ensure timely and cost-effective audit execution that meets client expectations and needs

• Conduct various types of audits, serving as either a Team Leader or a Team Member

• Support customer satisfaction through high-quality audit delivery

• Apply expertise in ISO 27001 – Information Security, ideally with third-party audit experience

Key Responsibilities & Accountabilities:

• Manage a portfolio of assigned clients, aligned by geographic location, qualifications, and specific contract requirements.

• Oversee the full lifecycle of audit engagements, including client contracting, scheduling, audit planning, travel coordination, on-site or remote assessment delivery, and results reporting.

• Monitor and maintain accurate client account records within BSI systems such as Point Global, ensuring timely visit cycles, invoicing accuracy, and sustained client satisfaction.

• Lead audit teams when required, fostering collaboration and providing mentorship and coaching to less experienced or new team members.

Skills & Abilities:

• Audit & Industry Knowledge: Solid understanding of management system auditing practices, including ISO standards and regulatory frameworks. Familiarity with client-specific products, processes, organizational structures, previous audit outcomes, and team competency requirements.

• Technical Proficiency: Proficient in Microsoft Office and general business technologies, documentation systems, and information systems relevant to audit preparation and reporting.

Qualification & Experience:

• Associate’s degree or higher (or equivalent certification or demonstrated work experience)

• Must have Internal or external auditing experience.

• Minimum of 4 years of practical experience in information technology, with at least 2 years specifically focused on information security roles or functions

• Experience in implementing or consulting on Information Security Management Systems (ISMS), or participating in internal (first party) or external (third-party) ISMS audits, is not required but considered a strong advantage

• Preferred Certifications: ISO/IEC 27001 Internal or Lead Auditor, CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control).

Travel requirements:

• This is a hybrid position with a primary focus on remote work; however, high travel availability is required.

#LI-KL1

About Us

BSI is a business improvement and standards company and for over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives.
 
Today BSI partners with more than 77,500 clients in 195 countries and engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments.
Utilizing its extensive expertise in key industry sectors - including automotive, aerospace, built environment, food and retail, and healthcare - BSI delivers on its purpose by helping its clients fulfil theirs.
Living by our core values of Client-Centricity, Agility, and Collaboration, BSI provides organizations with the confidence to grow by partnering with them to tackle society’s critical issues – from climate change to building trust in digital transformation and everything in between - to accelerate progress towards a better society and a sustainable world.

BSI is an Equal Opportunity Employer dedicated to fostering a diverse and inclusive workplace.