External Lead Auditor, ISO 27001 (Dutch / English)

About the role

Join Complade’s growing Audit Delivery team in one of two external Lead Auditor openings: one French / English and one Dutch / English. Both roles conduct independent, third-party ISO 27001 certification audits and report to the Director of Audit Delivery. Our proprietary platform reduces repetitive administration so you can focus on technical assessment, clear findings and client communication. Delivery is measured against monthly and quarterly targets for timeliness, accuracy and client experience.

Key responsibilities

• Plan and lead Stage 1, Stage 2, surveillance and recertification audits in both required languages.
• Conduct opening and closing meetings, interview client stakeholders and evaluate technical controls.
• Prepare clear, objective reports documenting conformity and nonconformities within agreed reporting timelines.
• Submit complete audit evidence to the independent Certification team and respond promptly to technical review questions.
• Stay current with ISO requirements and provide feedback to the Technology team on AI-assisted tools and audit automation.

Qualifications

• Active ISO 27001 Lead Auditor certification.
• Professional written and spoken fluency in both required languages.
• At least two years of experience conducting third-party ISO 27001 audits. Experience with additional standards is an advantage.
• Comfort working with automation and clear performance measures while maintaining audit accuracy and independence.
• University-level education or equivalent professional training in a relevant field, with practical IT and information security experience sufficient to evaluate an ISMS.
• Evidence of at least 10 ISMS on-site audit days within the past three years, working with a certification body and monitored by a qualified ISMS evaluator.
• The evaluated experience must include an initial certification audit covering Stage 1 and Stage 2, or a recertification audit, plus a surveillance audit, including document review, risk assessment and implementation review, and reporting.
• Internal audits and supplier audits do not count toward the required third-party certification audit experience. A training certificate alone is insufficient.
• Demonstrated ability to lead an audit team, allocate work, manage audit time, conduct technical interviews and opening and closing meetings, and produce evidence-based findings and recommendations.
• Protect confidentiality, disclose conflicts of interest and maintain impartiality. Do not provide ISMS consulting to audited clients or make certification decisions on audits you conducted.
• Submit your CV, qualifications, audit log (dates, days, certification body, audit types, role and evaluator details), and evaluator assessments without disclosing confidential client reports. Independent lead-auditor authorization requires Complade’s satisfactory competence evaluation.

Apply for this role

Send your CV, qualifications and relevant experience.

Careers at Complade