Digital Trust Lead Auditor

BSI

Lead Auditor assessing Information Security and Data Protection standards for BSI. Conducting assessments, producing reports, and advising clients on compliance measures.

Posted 7/22/2026full-timeLondon • 🇬🇧 United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting third-party assessments of Information Security and management systems, with a strong focus on ISO/IEC standards and risk management. Capable of producing high-quality reports and building trusted relationships with stakeholders to enhance client satisfaction and support business development.

Highest-signal resume keywords

Third-Party Audit ExperienceISO/IEC 27001 KnowledgeInformation Security ManagementData Protection ExperienceCloud Security Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk ManagementIT GovernanceCybersecurityManagement System FrameworksTechnical Environment InterpretationReport WritingData ProtectionCloud Security ControlsEmerging Threat Landscape Understanding

Soft Skills

CommunicationRelationship BuildingClient Satisfaction FocusAnalytical ThinkingProblem Solving

Certifications & Qualifications

CISSPCISMCISAISO/IEC 27001 Lead Auditor

Industry Keywords

BSI RequirementsISO/IEC StandardsGDPRISO/IEC 27701ISO/IEC 27017ISO/IEC 27018CSA CCMArtificial Intelligence Governance

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Conduct third‑party assessments of Information Security and associated management systems in accordance with BSI requirements and ISO/IEC standards.
Evaluate information security controls—technical, organisational, procedural—and determine their effectiveness and alignment with risk management objectives.
Communicate assessment outcomes to clients, ensuring clear understanding of decisions and required corrective actions.
Recommend issuance, continuation, suspension, or withdrawal of certificates in line with BSI certification processes and governance requirements.
Build strong, trusted relationships with client stakeholders, including CISOs, Data Protection Officers, IT leadership teams, and operational management.
Support clients in understanding how security, governance, risk, and compliance improvements strengthen business resilience and performance.
Identify opportunities to enhance client satisfaction and support business development initiatives through value-added insights.

Requirements

What you’ll need

Demonstrable third‑party audit or assurance experience.
Minimum two years of industry experience in Information Security, IT governance, risk management, data protection, cybersecurity, or related technical environments.
Strong knowledge of management system frameworks, particularly ISO/IEC 27001 and related security standards.
Ability to interpret technical environments (cloud, networks, applications, data flows) and map them to management system and risk requirements.
Experience producing detailed, high‑quality reports that explain complex issues clearly.
Sector-specific security qualifications or recognised industry credentials (e.g., CISSP, CISM, CISA, ISO/IEC 27001 Lead Auditor) (Desirable).
Experience in Data Protection (e.g., GDPR, ISO/IEC 27701) (Desirable).
Knowledge of cloud security frameworks or controls (e.g., ISO/IEC 27017/27018, CSA CCM) (Desirable).
Awareness of Artificial Intelligence governance, risks, and ethical considerations (Desirable).
Understanding of cybersecurity fundamentals and emerging threat landscapes (Desirable).

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Professional development opportunities