ISO 27001 Internal Auditor

At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development.

An organization is preparing for ISO/IEC 27001 certification and needs an independent internal audit of its Information Security Management System before the external certification audit. You will review how the ISMS works in practice, assess implemented information security controls, and provide a clear picture of certification readiness across two business operations.

This role suits you if you enjoy combining structure, objectivity, and deep information security expertise. You will work closely with key stakeholders while keeping an independent perspective, and your findings will directly influence the next steps toward certification. It is a great opportunity to make visible impact on both compliance and security maturity.

• You will plan and execute two separate ISO/IEC 27001 internal audits within the defined ISMS scope.
• You will review the ISMS against ISO/IEC 27001 requirements and assess whether policies, procedures, and controls are implemented and effective.
• You will verify compliance with applicable Annex A controls based on the Statement of Applicability.
• You will evaluate risk management practices and how they support the overall ISMS.
• You will conduct interviews, review evidence, and build an objective assessment of current readiness.
• You will identify non-conformities, observations, and improvement opportunities in a clear and practical way.
• You will produce an audit plan, an audit report for management review, and a readout session for key stakeholders.

• Proven experience conducting ISO/IEC 27001 internal audits.
• Strong knowledge of ISMS implementation and audit practices.
• Relevant certifications such as ISO 27001 Lead Auditor, CISA, CISSP, or equivalent.
• Ability to work independently and provide an objective assessment.
• Fluent communication skills in Swedish and English.

• Experience working with organizations of similar size and complexity.

• Permanent employment at Avaron AB
• Occupational pension
• Wellness allowance of SEK 5,000 per year

Selections are made on an ongoing basis – apply as soon as you can.