Internal Audit

Internal Audit We are currently undergoing the implementation of an Information Security Management System (ISMS) aligned with ISO/IEC 27001. As part of the certification process, an independent internal audit is required prior to the certification audit. We are seeking a qualified and experienced consultant to perform this internal audit, with focus on the ISMS and implemented information security controls. Scope of Work The selected consultant will be responsible for planning and executing two separate ISO/IEC 27001 internal audits for operations in Stockholm, Sweden and Copenhagen, Denmark. The audit shall include, but not be limited to: - Review of the ISMS against ISO/IEC 27001 requirements - Assessment of implemented policies, procedures, and controls - Verification of compliance with Annex A controls, as applicable to the Statement of Applicability - Evaluation of risk management practices - Identification of non-conformities, observations, and improvement opportunities - Preparation of an audit report suitable for management review and certification readiness The audit scope is confined to information security and the defined ISMS scope within the organization. Deliverables The consultant is expected to provide: - Audit plan and schedule - Conducted audit interviews and evidence review - Audit report including: - Identified non-conformities (major/minor) - Observations and recommendations - Summary of ISMS effectiveness - Readout session with key stakeholders Requirements for Consultant We are looking for a consultant with: - Proven experience conducting ISO/IEC 27001 internal audits - Relevant certifications (e.g. ISO 27001 Lead Auditor, CISA, CISSP, or equivalent) - Strong knowledge of ISMS implementation and audit practices - Experience working with organizations of similar size and complexity (preferred) - Ability to work independently and provide an objective assessment Timeline - Target audit period: October 2026 - Estimated duration: 3–5 days depending on scope - Final report delivery: Within 10 days after audit completion Startdatum: 2026-08-17 Slutdatum: 2027-02-27 Omfattning: 100% Ort: Stockholm Språk: Svenska och Engelska Vi offererar löpande och ärendet kan komma att stängas ner innan satt deadline. Under uppdraget kommer Ework Services (0,9%) att dras av från det totala fakturerade beloppet. Vänligen ansök direkt via vårt system med: - uppdaterat CV - timpris (inkl. omkostnader) - information kring tillgänglighet för att påbörja uppdraget