Auditor / Sr Auditor_Rz at CERTIFICATION COMPANY · Ahmedabad, Gujrat · 2 - 9 years · ₹10L - ₹14L / yr · Posted 26 Feb 2026
Auditor – Management Systems (ISO Standards)
Location: Ahmedabad ( Hybrid)
Employment Type: Full-Time
🔎 About the Role
We are hiring a skilled Management System Auditor to conduct ISO audits, deliver high-quality assessment outcomes, and support certification activities. The ideal candidate must have hands-on experience in ISO 9001, 14001, 45001, 27001, 22000, 50001 or other standards, along with strong reporting and client-handling skills.
This role involves extensive travel, interaction with diverse industries, and strict adherence to ISO/IEC 17021-1 and ISO 19011 guidelines.
🧩 Key Responsibilities
- Plan, prepare, and execute Stage 1, Stage 2, Surveillance, Recertification, Transfer & Special Audits.
- Review client documentation, audit scope, and previous audit history.
- Evaluate compliance with applicable ISO standards using process approach, risk-based thinking & sampling techniques.
- Conduct opening & closing meetings and prepare accurate audit reports.
- Record findings, non-conformities, observations, and improvement opportunities.
- Ensure professional client interaction across Quality, EHS, IT, HR & Operations teams.
- Maintain impartiality, confidentiality, and compliance with accreditation guidelines.
- Participate in calibration, witness audits, and competency upgrades.
- Identify business opportunities and refer potential clients during audits.
🎓 Qualifications
- Bachelor’s degree in Engineering, Science, IT, or Environmental Science.
- CQI/IRCA Certified Lead Auditor in at least one standard (Mandatory/Preferred).
- Minimum 5 years industry/auditing experience.
- Experience conducting minimum 15–20 third-party audits (preferred).
- Exposure to sectors such as manufacturing, IT, pharma, infrastructure, services (added advantage).
💼 Skills & Competencies
- Strong knowledge of ISO standards & audit techniques.
- Familiar with ISO 19011 principles.
- Excellent communication, report writing & analytical skills.
- Ability to manage audits across multiple locations.
- High level of integrity, professionalism, and client orientation.
- Proficiency in MS Office.
📈 Key Performance Indicators (KPIs)
- Number of audits completed within timeline & quality standards.
- Accuracy and clarity of audit reports.
- Client satisfaction scores and feedback.
- Lead sharing & business development support.
- Compliance with accreditation and internal review requirements.
✈️ Travel Requirement
- Willingness to travel 60–80% across India and overseas for on-site audits.
- Flexibility for hybrid (on-site + remote) audits.
Shubham Vishwakarma
Full Stack Developer - Averlon
Similar jobs (1)
We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the
design, implementation, and maintenance of our ISO 27001 Information Security Management
System (ISMS). This is a hands-on leadership role responsible for establishing a robust security
governance framework, achieving ISO 27001 certification, and embedding a culture of
continuous security improvement across the organization.
Key Responsibilities
● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation
from gap analysis through to successful Stage 1 and Stage 2 certification audits;
manage external auditor relationships
● Risk Management: Develop and operationalize the information security risk
management framework; conduct risk assessments, treatment planning, and risk
acceptance processes.
● Policy & Governance : Author, approve, and maintain the Statement of Applicability
(SoA), information security policies, standards, and procedures aligned with ISO 27001
Annex A controls.
● Control Implementation: Translate ISO 27001 Annex A controls into operational
security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to
implement and validate controls.
● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and
KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective
actions.
● Third-Party Risk: Oversee vendor security assessments and ensure supply chain
security controls meet organizational and ISO 27001 standards.
● Stakeholder Management: Report ISMS performance, risks, and compliance status to
senior leadership and the board; act as primary liaison for external auditors and
regulators.
Required Qualifications
● 5+ years of experience in information security governance, risk, and compliance
● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap
analysis → certification)
● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS
documentation requirements
● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,
OCTAVE, FAIR)
● Familiarity with internal audit practices and managing external certification bodies
● Excellent stakeholder management and ability to influence across technical and non-
technical teams
● Strong documentation and communication skills — able to translate complex standards
into actionable guidance
Preferred Qualifications
● Experience implementing ISMS in fintech, healthcare, or regulated industries
● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks
● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments
● Knowledge of automation for compliance evidence collection and control testing
● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead
Implementer
Why Join Us
● Opportunity to build the security governance function from the ground up
● High-visibility role with direct impact on customer trust and market differentiation
● Collaborative environment that values security as a business enabler, not a blocker
Company Profile:
We are a one-stop financial services shop, widely known for quality of its advice, personalized
service and cutting-edge technology. We started our journey in 2008. Currently we are serving
more than 50,000 investors with a team of 100 members. Our core product offering is mutual
fund, FD, Govt. Bonds, Debenture, etc.
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon