Skip to content
MVPeopleGroup
GRC & Compliance

ISO 27001 Compliance Consultant

Utrecht, UTPermanent (MVPermanent)HybridSenioroverige

About the assignment

A leading organisation across sectors needs expertise to establish or strengthen ISO 27001 compliance. You'll assess current security posture, identify gaps against the standard, and create actionable roadmaps. Your work directly reduces risk and builds stakeholder confidence in information security maturity.

You work across technical and business functions, translating compliance requirements into practical controls. The role balances audit rigour with pragmatism—standards matter, but so does feasibility.

Your responsibilities

  • Conduct gap assessments against ISO 27001 controls and documentation requirements
  • Design security policies, procedures and control frameworks tailored to organisational context
  • Support implementation of technical and organisational controls
  • Prepare and guide organisations through external certification audits
  • Review evidence of control operation and maintain compliance documentation
  • Train teams on ISO 27001 principles and their role in compliance
  • Monitor compliance status and recommend corrective actions
  • Advise on integration with related frameworks (NIS2, DORA, SOC 2)

Tech Stack & Tools

Platforms & Tooling

ServiceNow GRCArcherOneTrustaudit and evidence management tools

Frameworks & Standards

ISO/IEC 27001:2022ISO/IEC 27002NIS2 DirectiveDORASOC 2

Methodologies

Risk assessmentControl design and testingAudit planning and executionProcess documentation

Certifications (preferred)

ISO 27001 Lead Auditor (CISA, CISM, CRISC preferred)

Must-haves

  • Minimum 5 years' experience in ISO 27001 implementation or audit
  • Proven ability to assess security controls and identify compliance gaps
  • Experience designing policies and operational procedures
  • Strong communication skills with technical and non-technical stakeholders
  • Knowledge of Dutch and EU regulatory context (GDPR, NIS2, DORA)

Nice-to-haves

  • Lead Auditor certification (ISO 27001 or equivalent)
  • Experience with GRC platforms and audit automation
  • Background in risk management or internal audit

What we offer

  • Work on meaningful compliance programmes that reduce organisational risk
  • Collaborate with C-suite and board-level stakeholders
  • Flexible engagement (contract, full-time, hybrid)
  • Access to the latest GRC tools and compliance frameworks
  • Continuous learning in a rapidly evolving regulatory landscape
  • Personal guidance from a dedicated MVPeople consultant who knows your niche

The process

1

Introduction

Phone call with your MVPeople consultant (within 24 hours)

2

Match & Brief

We discuss the assignment in detail and prepare you

3

Client meeting

Introduction to the client

4

Start

Contracting and onboarding

Details

Type

Permanent (MVPermanent)

Location

Utrecht, UT

Work model

Hybrid

Level

Senior

Industry

overige

Market indication

€75,000 - €100,000 per year

Posted

10 November 2026

Job ID

60142



Contact

MVPeople Group

cv@mvpeoplegroup.com
Apply nowMore information
Apply now