Auditor of InfoSec Management Systems (ISO/IEC 27001)

Auditor of InfoSec Management Systems (ISO/IEC 27001) at SGS in Warsaw, Poland.

Role Summary

InfoSec product group

• certification of management systems, e.g. ISO/IEC 27001, ISO 22301
• certification of IT services, e.g. ISO/IEC 20000-1, ISO 22237-1, ISO/IEC 27017
• audits of industry standards, e.g. TISAX, ISO/SAE 21434, WLA-SCS, ISO 18295
• cybersecurity audits, e.g. KSC, NIS2, DORA
• personal data audits, e.g. Europrivacy, ISO/IEC 27701
• supplier audits according to specific criteria
• Description of the job offer
• conducting audits in enterprises in the field of ISO/IEC 27001, ISO 22301 and other InfoSec standards in Poland and abroad
• preparing post-audit documentation in English in dedicated software
• opportunity to participate in product development, including requirements gathering, product design, testing and launch
• conducting training for SGS clients

Requirements

• higher education in a specific field
• lead auditor qualifications (ISO/IEC 27001, ISO 22301) supported by an appropriate certificate
• Experience in conducting third party audits
• minimum 5 years of professional experience related to information security
• knowledge of the latest IT technologies supported by professional experience
• Proficient use of computer and MS Office tools
• valid category B driving license
• readiness to undertake frequent business trips
• developed communication skills, stress resistance
• responsibility, accuracy, conscientiousness in performing tasks
• ability to analytically assess phenomena and make decisions based on facts
• independence in organizing one's own work
• willingness to acquire/improve professional qualifications
• knowledge of English
• Knowledge of German/Swedish/Danish/Norwegian is an advantage

Benefits

• interesting and developmental work in a company that is a leader on the global market
• work in an international environment
• friendly atmosphere in the team
• various training and professional development opportunities
• competitive base salary
• a company car and modern work tools
• work model: field work + remote work (therefore the possibility of working for people located throughout the country)
• wide social package: private medical care (Medicover), group insurance, access to the cafeteria platform, co-financing for a sports card, co-financing for foreign language learning
• Acting pursuant to Art. 24 section 1 of the Act of June 14, 2024 on the protection of whistleblowers (Journal of Laws of 2024, item 928), we would like to inform you that in SGS Polska Sp. z o. o. and in SGS Global Business Services Europe Sp. z o. o. The internal reporting procedure applies.

The internal reporting procedure is available on the website at the link below:

Internal reporting procedure | SGS Poland

About the Company

SGS is a global leader in testing, inspection and certification. We operate a network of over 2,500 laboratories and offices in 115 countries, supported by a team of over 100,000 dedicated professionals. We have over 145 years of experience in providing excellent services - we combine the accuracy and precision that characterize Swiss companies to help organizations achieve the highest standards of quality, compliance and sustainability.

Our slogan - when you need to be sure - is a promise emphasizing our commitment to trust, reliability and reliability that enable companies to develop with confidence. We proudly deliver our expert services as SGS, supported by our other trusted and highly specialized brands such as Applied Technical Services, Brightsight, Bluesign and Nutrasource.

SGS is a company listed on the Swiss Stock Exchange under the symbol SGSN (ISIN CH1256740924, Reuters SGSN.S, Bloomberg SGSN SW).

Due to the development of InfoSec services at SGS Polska and the creation of a European InfoSec HUB in Poland, we are looking for candidates for the position of:

Auditor of InfoSec Management Systems