SysTools is a premier cybersecurity and IT solutions provider dedicated to making the digital setting more secure for users across industries globally. As a Make-in-India innovator and an ISO 9001:2015 & 27001:2022 certified organization, we develop high-tech, cost-effective solutions to address the world’s most complex data and security challenges.

We offer a comprehensive suite of advanced cybersecurity services, including Security Operations Center (SOC) management, Vulnerability Assessment and Penetration Testing (VAPT), Network Security, Application Security Audits, Red Teaming, ISO 27001 Compliance, API Testing, and AI Security Testing. We are seeking an experienced and certified ISO 27001 Lead Auditor to plan, execute, and manage Information Security Management System (ISMS) audits for our clients and internal infrastructure. In this role, you will evaluate security postures, identify risks and non-conformities, and provide actionable recommendations to ensure compliance with the latest ISO/IEC 27001 standards.

You will work closely with our SOC, VAPT, and Network Security teams to deliver holistic security and compliance solutions. Key Responsibilities

Audit Planning & Execution: Lead and conduct internal and external ISMS audits in accordance with ISO/IEC 27001 standards (including the 27001:2022 updates).

Risk Assessment: Evaluate clients' information security policies, procedures, and controls to identify vulnerabilities and gaps against the standard.

Reporting: Prepare comprehensive, high-quality audit reports detailing findings, non-conformities, and opportunities for improvement.

Remediation Guidance:



Collaborate with clients and internal stakeholders to develop effective Corrective and Preventive Action (CAPA) plans.

Compliance Strategy: Advise clients on building, implementing, and maintaining robust ISMS frameworks from the ground up.

Cross-Functional Collaboration: Work alongside our VAPT, Application Security, and Red Teaming experts to contextualize technical findings within compliance frameworks.

Continuous Improvement: Stay up-to-date with the evolving cybersecurity landscape, regulatory requirements, and updates to international standards.

Qualifications & Requirements

Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Certification: Active ISO/IEC 27001 Lead Auditor Certification (IRCA accredited highly preferred). Additional certifications like CISA, CISM, or CISSP are a strong plus.

Experience: 4 to 7+ years of dedicated experience in information security, risk management, and IT auditing, with a proven track record of leading ISO 27001 audits.

Technical Knowledge: Strong understanding of network security, cloud environments, access control, cryptography, and general IT infrastructure.

Framework Familiarity: Working knowledge of other compliance frameworks and standards (e.g., SOC 2, GDPR, HIPAA, NIST) is advantageous.

Preferred Skills

Exceptional analytical and problem-solving abilities.

Excellent written and verbal communication skills, with the ability to explain complex security concepts to both technical and executive audiences.

Strong project management skills and the ability to handle multiple client audits simultaneously.

📌 Lead Auditor ISO 27001 (Pune)
🏢 SysTools
📍 Pune