job description
Join StaffKing Pte Ltd as a Senior ISMS Auditor (ISO 27001) in the vibrant heart of Bali, Indonesia! This is a unique opportunity for information security professionals to thrive in a dynamic, international environment while enjoying the tropical work-life balance Bali is famous for.
As an ISMS Auditor, you will play a pivotal role in ensuring our clients’ information security management systems (ISMS) comply with ISO 27001 standards, identifying vulnerabilities, and implementing robust security frameworks. This position offers exceptional career growth, with opportunities to work on global projects, collaborate with cross-functional teams, and travel internationally twice a year for audits and training.
We reward excellence with a competitive salary (USD 5,000–6,000/month), performance bonuses (up to 5 months), 16+ days of annual leave, comprehensive medical coverage, and a supportive work culture that values innovation and professional development.
If you are a detail-oriented security expert with a passion for compliance and risk management, we want to hear from you. Apply today and take the next step in your information security career in paradise!
Responsibility
- Conduct ISO 27001 audits to assess compliance with information security policies, procedures, and controls.
- Identify security risks, vulnerabilities, and gaps in ISMS frameworks and recommend mitigating actions.
- Develop and implement risk assessment methodologies and security improvement plans.
- Prepare detailed audit reports, including findings, non-conformities, and corrective action recommendations.
- Collaborate with IT and business teams to ensure alignment with ISO 27001 standards and best practices.
- Lead internal and external audits, including client-facing engagements and certification audits.
- Stay updated on emerging cybersecurity threats and regulatory changes affecting ISMS.
- Provide training and awareness sessions on information security policies and compliance requirements.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum 3–5 years of experience in ISMS auditing, ISO 27001 compliance, or information security management.
- Certifications such as ISO 27001 Lead Auditor, CISSP, CISA, or CISM are highly preferred.
- Proven experience conducting risk assessments, gap analyses, and compliance audits.
- Strong understanding of information security frameworks (e.g., NIST, COBIT, SOC 2).
- Excellent analytical, problem-solving, and report-writing skills.
- Ability to work independently and manage multiple audit projects under tight deadlines.
- Fluency in English (written and verbal) is mandatory; additional languages are a plus.