Freelance ISO 27001 Lead Auditor – Slovenia

About the role

We are looking for an experienced, autonomous Lead Auditor specialized in ISO 27001 to carry out information‑security audits for clients in Slovenia. The position is freelance and call‑based, with assignments scheduled according to an agreed plan. The role suits a seasoned professional who can manage complex audits independently and travel to client sites as needed.

Key responsibilities

• Plan, execute and report ISO 27001 compliance audits at client organisations.
• Assess the implementation and effectiveness of Information Security Management Systems (ISMS).
• Identify non‑conformities, prepare detailed findings and recommend improvement measures.
• Conduct pre‑audit briefings, exit meetings and communicate results with management and IT/security teams.
• Gather evidence, complete checklists, take photographs and ensure audit documentation meets international standards.

Required profile

• Lead Auditor ISO 27001 certification from a recognised body (IRCA, PECB, Exemplar Global, etc.).
• Minimum three years of experience performing ISO 27001 audits, preferably in Slovenian or EU organisations.
• Fluent Slovenian (spoken and written) and good English proficiency.
• Strong knowledge of ISMS, risk management, compliance and information‑security governance.

Required skills

• ISO/IEC 27001:2022 (and earlier versions).
• NIST Cybersecurity Framework.
• ISO 27002 and ISO 27035 (incident management).
• Audit methodologies – sampling, evidence gathering, risk‑based approach.
• Understanding of IT environments, cloud infrastructures and GDPR data‑protection requirements.