ISO/IEC 27001 Implementer Officer (contract)

Want to help build a world that works better for everyone? Kin + Carta is a global digital transformation consultancy that makes a difference to the billions who now work, play, shop, communicate and share online.

Join 2,000 curious and diverse minds in connecting people, data and technology to produce amazing experiences for some of the world’s most influential companies. Become a maker, builder or creator as we explore the possibilities of sustainable digital technology, helping clients to rapidly innovate, modernise their systems, enable their teams, and optimise for continued growth. 

We focus on tech but we’re a proudly inclusive business with trust and human connection at its heart. People, the planet, and profit matter equally to us which is why we’re a certified B Corporation in the United States and Europe. With additional offices in South America, there is a place for you here wherever you’re based.

Kin + Carta is currently seeking UK based ISO/IEC 27001 certified implementation officer to support the development of a global ISO/IEC 27001 certified ISMS on an initial 3 month contract basis. 

The officer provides business support and strategic and tactical guidance for the cybersecurity program supporting enterprise security initiatives. The immediate focus is on asset evaluation and risk assessments creating the foundations to build and define an ISMS scope, Statement of Applicability and implementation plan.

The Officer must be capable of working closely with all interested parties / stakeholders e.g. Kin, partners, third parties, project managers and business subject matter experts (SMEs). The role requires an organisational and technical background and ability to understand and align stakeholders, their purpose, and their security requirements and security needs, wherever they reside.

• Contribute to the development of the ISMS to provide foundations for a global ISO/IEC 27001 certified ISMS.
• Evaluate assets in collaboration with owners, stewards and custodians.
• Collaborate on risk assessment and treatment solutions tailored to the needs of the region. 
• Attend, facilitate, and/or capture meetings and content
• Assist in data collection for KPIs relating to objectives of the project

• Design and implementation experience of an ISMS aligned to international security standards frameworks or methodologies. Focus on ISO/IEC 27001
• Strong written and verbal communication skills across all levels of the organisation. 
• High level of integrity, trustworthiness and confidence, and able to represent the company and security leadership with the highest level of professionalism.
• Technical understanding with an investigative mindset.
• Efficient, firm but friendly character that will ensure tasks are being instigated and escalate where necessary.
• Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.
• Critical thinking with a mindset that considers solutions prior to presenting challenges
• Lead and produce quality work with minimal guidance.
• Collaboratively work with 3rd parties and handle challenging relationships with diplomacy and balance.
• Understanding and mapping business context against information security best practices
• Applicable knowledge of national and global cybersecurity policies, regulations and security frameworks. Global perspective - Regional delivery. 
• Strong project management, multitasking and organizational skills.

• ISO/IEC 27001 Implementer