Internal Auditor – ISO/IEC 27001:2022 (Short Term Contract)

About Rapid Strategy
Rapid Strategy is an award-winning, African-American-owned small business delivering high-impact cybersecurity, risk, and compliance services to federal and commercial clients. Our team combines deep technical knowledge with practical consulting expertise to help organizations reduce risk, meet regulatory requirements, and improve their overall security posture.

We are seeking a contract based Internal Auditor with experience supporting ISO/IEC 27001:2022 audits to assist a client in preparing for their Stage 1 certification. This project-based role involves reviewing documentation, conducting interviews, sampling controls, and preparing observations aligned with ISO 27001 Clause 4–10 and Annex A controls.

This is an ideal role for an experienced auditor or GRC consultant who is looking for short-term, impactful work in a focused and well-scoped environment. This role is fully remote with only 1 week of travel expected (travel to be reimbursed). 

Key Responsibilities

• Conduct an internal audit against ISO/IEC 27001:2022 requirements, including Clauses 4–10 and Annex A

• Review policies, procedures, risk treatment plans, and Statements of Applicability (SoA)

• Facilitate or support interviews with control owners and stakeholders

• Analyze and document evidence related to management, physical, and technical controls

• Provide observations and nonconformity assessments in accordance with ISO internal audit principles

• Support summary reporting and audit tracking in the client’s GRC platform

• Collaborate with internal quality management staff and offer guidance during shadowing/observation sessions

• Deliver findings in a clear and organized format for internal review and certification preparation

• 3–5 years of experience conducting ISO 27001 internal audits or supporting ISO certification readiness

• Familiarity with ISO/IEC 27001:2022, Annex A controls, and common ISMS documentation

• Strong attention to detail and ability to identify and document gaps or risks in compliance environments

• Professional communication skills and experience working with cross-functional teams

• Must be eligible to work in the U.S.; no clearance required

• Willingness to travel for one week of onsite fieldwork (expenses reimbursed)

• ISO 27001 Lead Auditor certification or equivalent training/ certification

• Experience with manufacturing or industrial environments

• Familiarity with ISO 9001 or integrated management systems (IMS)

• Experience using GRC platforms for audits or compliance tracking