ISMS & ISO 27001 Security Process Specialist

About the role

We are strengthening our Information Security Management System (ISMS) and advancing towards ISO/IEC 27001:2022 certification readiness. The ISMS & ISO 27001 Security Process Specialist will build, document, and operationalise a security management framework that is practical, scalable and embedded in day‑to‑day operations across the global maritime organisation.

Key responsibilities

• Build and maintain the ISMS aligned with ISO/IEC 27001:2022.
• Create policies, procedures, standards, registers and governance documentation.
• Establish traceability between risks, controls, owners, processes and evidence.
• Document and formalise security, IT and governance processes across the organisation.
• Map existing practices to ISO/IEC 27001 clauses, perform gap assessments and support remediation.
• Manage the evidence repository, coordinate audit evidence and support internal and certification audits.

Required profile

• 4‑7 years of experience in information security, ISMS, GRC or related fields.
• Hands‑on experience implementing or maintaining an ISO/IEC 27001‑compliant management system.
• Proven ability to document processes, controls and governance frameworks in complex international organisations.

Required skills

• ISO/IEC 27001:2022 framework knowledge.
• Information Security Management Systems (ISMS) implementation.
• Risk and control management, GRC.
• Process documentation and modelling (BPM tools such as Mavim, ARIS, Signavio, Visio).
• IT Service Management (ITIL) and platforms like ServiceNow.
• Data governance and data stewardship concepts.