Project Manager ISO 27001

Function

We’re looking for an experienced consultant to join our client’s team as an ISO/IEC 27001 Project Manager. In this role, you will take ownership of delivering and evolving an Information Security Management System (ISMS), ensuring it meets certification standards while being effectively embedded across the organization. You’ll collaborate with a wide range of stakeholders to strengthen information security practices in a structured and sustainable way.

Role & Responsibilities

As the driving force behind the ISO/IEC 27001 program, you will oversee the full lifecycle from initial assessment to continuous improvement:

• Lead the implementation, certification, and maintenance of an ISO/IEC 27001-compliant ISMS
• Define scope, roadmap, milestones, and dependencies for the overall program
• Coordinate certification and surveillance audits with external parties
• Conduct or oversee gap analyses, risk assessments, and maturity evaluations
• Ensure alignment with relevant regulatory frameworks and internal policies
• Maintain key ISMS documentation, including policies, procedures, risk registers, and Statements of Applicability
• Act as the central point of contact across IT, business, and audit stakeholders
• Support control owners in implementing and evidencing security measures
• Drive awareness and adoption of information security practices throughout the organization
• Monitor ISMS performance and initiate continuous improvement actions
• Track non-conformities, corrective actions, and management follow-ups
• Prepare reporting and contribute to management review processes

Profile & Experience

Our client is looking for a professional who combines strong project leadership with deep knowledge of information security and compliance:

• Proven experience as a Project or Program Manager in information security, risk, or compliance
• Hands-on experience with ISO/IEC 27001 implementation and/or certification processes
• Solid understanding of ISMS principles, including risk management, Annex A controls, and internal audits
• Experience working with auditors, regulators, or assurance teams
• Ability to manage complex, cross-functional initiatives in regulated environments

Skills & Competencies

To succeed in this role, you bring both structure and adaptability:

• Strong project management and organizational skills
• Excellent stakeholder management and communication abilities
• Certification such as ISO/IEC 27001 Lead Implementer or Lead Auditor is a plus
• Familiarity with related standards and frameworks (e.g. ISO 22301, ISO 27701, COBIT, ITIL)
• Knowledge of European regulatory environments (e.g. NIS2, DORA, GDPR)
• Detail-oriented with a strong focus on documentation and compliance
• Pragmatic mindset with the ability to balance business needs and regulatory requirements
• Comfortable navigating complex and highly regulated organizations

Language Requirements

• English: Professional proficiency
• Dutch: Professional proficiency