Complade external auditor career

• Conduct remote ISMS audits in compliance with ISO 27001 and relevant standards.
• Perform Stage 1 documentation reviews and Stage 2 implementation assessments.
• Assess cybersecurity controls, policies, and risk management frameworks.
• Document findings, prepare audit reports, and communicate results effectively.

• Professional education or training equivalent to university level in a relevant field.
• Practical workplace experience in information technology and information security sufficient to audit an information security management system (ISMS).
• ISO 27001 Lead Auditor or equivalent auditor certification, fluency in English, and the ability to work independently remotely.
• Sufficient ISMS audit training and demonstrated ability to audit against ISO/IEC 27001. An auditor course or certificate alone does not replace evaluated certification audit experience.

• Complade requires evidence of at least 10 ISMS on-site audit days completed within the past three years, working with a certification body and monitored by a qualified ISMS evaluator.
• The evaluated experience must include participation as an auditor-in-training in at least one initial ISMS certification audit covering both Stage 1 and Stage 2, or one recertification audit, plus at least one surveillance audit.
• Participation must include document review, review of risk assessment and its implementation, and audit reporting.
• First-party audits (internal audits) and second-party audits (such as supplier audits) do not count towards this third-party certification audit experience requirement.

• Apply management systems audit principles, practices and techniques, and evaluate an organization’s internal audit processes.
• Understand different organization types and sizes, governance, organizational structure, workplace practices, information and data systems, documentation systems and information technology.
• Read and write accurately and efficiently, keep clear audit notes, and communicate findings and conclusions in reports.
• Present findings and conclusions clearly. Team leaders must also present results and recommendations at closing meetings in language appropriate to the audience.
• Ask well-formed, open-ended interview questions and listen carefully to understand and evaluate the answers.
• Conduct and manage audits within the agreed timeframe. Team leaders must facilitate meetings, assign work and adjust assignments when needed.

• Act ethically: be fair, truthful, honest and discreet, and protect confidential information.
• Be open-minded and diplomatic, work collaboratively, and remain observant and perceptive.
• Adapt to different situations, persist in achieving audit objectives, and reach timely conclusions through logical reasoning and analysis.
• Work independently and professionally, with courtesy and conscientious judgement.
• Show moral courage by acting responsibly and ethically, including when findings or decisions lead to disagreement.
• Stay organized through effective planning, prioritization and time management. Complade evaluates behaviour in context and addresses weaknesses that could adversely affect certification activities.

• Send your CV, relevant education and training records, and an audit log showing dates, audit days, certification body, audit type, your role and evaluator details.
• Include evidence of the evaluator’s assessment of your work. Protect client confidentiality and do not send confidential client audit reports without authorization. Complade reviews the evidence and demonstrated competence before authorizing independent audit work.

If you meet some requirements but still need experience or further competence assessment, we encourage you to apply to Complade’s Auditor-in-Training program. Admission depends on a review of your background and available supervised audit opportunities.

Explore the Auditor-in-Training program

Apply: join@complade.com