
Closed
Posted
We already run an ISO 27001:2022-certified ISMS, but the day-to-day work needed to keep it sharp has outgrown our in-house capacity. I’d like a security professional to partner with us long-term and take ownership of three core activities: • Risk assessment & treatment – Keep the risk register current, re-score risks when our environment changes, and refine treatment plans so the Statement of Applicability always reflects reality. • Gap-analysis internal audits – Plan and conduct internal audits focused on finding control gaps before the external auditors do, then deliver concise reports and corrective-action tracking. • Policy development & maintenance – Review every policy in the ISMS library, update wording to match ISO 27001:2022 terminology, and draft new material when business processes evolve. All required controls are already implemented, so the emphasis is on maintaining evidence rather than rolling out new technology. I’ll give you full access to existing documentation, past audit findings, and our risk tool (Excel-based for now). You will work remotely, meet with key process owners, and deliver updated artefacts in GDrive on an agreed schedule. Acceptance criteria 1. Updated risk register and SoA published quarterly. 2. Gap-analysis audit report—with findings, priorities and corrective actions—delivered within five working days of each audit. 3. Policy set reviewed end-to-end once per year, with change log and version control maintained. If you are comfortable navigating ISO 27001:2022, Annex A, and the PDCA cycle, this should be straightforward work delivered consistently every month.
Project ID: 40666502
23 proposals
Remote project
Active 2 hours ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
23 freelancers are bidding on average $47 AUD/hour for this job

Drawing from my expertise in project management, software applications, and attention to detail, I am incredibly aligned with your ISO 27001 ISMS Support needs. My proficiency in MS Word is paramount for maintaining an updated risk register and the enforcement of these policies. Furthermore, my skills with Excel and risk assessment strategies will ensure precise documentation with clear visibility for your team. Additionally, my experience in conducting internal audits that minimizes control lapses before external audits, aligns directly with your requirements. I am methodical yet efficient in my audit approach to unveil potential control gaps promptly while offering feasible and actionable solutions for any identified shortcomings. Moreover, given my extensive experience with respect to revisions and policy development, I am skilled at adapting material to sync up with updated industry standards like ISO 27001:2022. Rest assured that all of your policies will be annually reviewed and revised accordingly maintaining a comprehensive change log. When you entrust me with your project, not only do you gain my proven skill set but also an unwavering commitment to service excellence. My promise to you is timely delivery without a compromise on quality ensuring that we exceed each of your acceptance criteria. Let's partner up for the success of your ISO 27001 ISMS.
$20 AUD in 40 days
7.6
7.6

Your project needs ongoing ISO 27001:2022 ISMS support covering risk assessment and treatment, gap-analysis internal audits, and policy maintenance so the risk register, SoA, audit reports, and policy set stay current and audit-ready. I understand the focus is on maintaining evidence, tracking corrective actions, and aligning all updates with Annex A and the PDCA cycle for an established, certified ISMS. I will keep the register, SoA, and policies aligned to the latest business changes, carry out gap-focused internal audits, and deliver concise reports with clear findings, priorities, and action tracking in the format you need. I can work remotely and coordinate with Australia time zone hours; if you want, I can also follow your existing audit template and change-control process exactly. Best, Sonia
$10 AUD in 40 days
6.8
6.8

Hi there, We will maintain your ISO 27001:2022 ISMS by keeping the risk register and Statement of Applicability current, running gap-analysis internal audits, and updating policies against Annex A and your existing evidence set. We will review the documentation in place, work with process owners, and deliver concise corrective-action tracking with version control. We bring public Freelancer review history covering GRC, healthcare research and regulated-sector analysis engagements. Best Regards, 8veer
$800 AUD in 12 days
6.7
6.7

As an IBM certified Cybersecurity Analyst and someone who has navigated the PDCA cycle multiple times, I am confident that my skills align precisely with your ongoing ISO 27001:2022 ISMS Support needs. I would be honored to take ownership of essential tasks like risk assessment, gap-analysis internal audits, and policy development for your organization. With my keen eye for detail and extensive experience in reports and technical writing, I can confidently ensure your risk register remains current and that your policies strictly adhere to the ISO 27001:2022 terminology. Beyond just completing tasks, I pride myself on delivering timely results without compromising quality- exactly what you need for gap analysis audit reports, policy reviews, and evidence maintenance. My quick turnarounds coupled with concise reports and actionable recommendations will not only help you identify control gaps efficiently but also address them in the timeliest manner possible.
$12 AUD in 40 days
6.2
6.2

Hi, thanks for your time to read my proposal. I am a seasoned information security professional with diverse experience in ISO27001, 27701 system development, implementation and certification. I am IRCA UK Certified Lead Auditor in , ISO9001, ISO27001, ISO14001, ISO22000, ISO17025. I have completed dozens of similar projects for global clients and available to work on your ongoing ISO27001 support project. I am proficient in all areas you mentioned i.e. Risk Register, SoA, Annex A controls deployment, maintain and update documentation and ISMS records, keep and maintain ISMS updated, audit ready. Would you please respond so that we can discuss and move ahead.
$15 AUD in 40 days
6.2
6.2

Hello, I understand that you are in need of ongoing ISO 27001 ISMS support to maintain the sharpness of your existing system. As a seasoned security professional with extensive experience in risk assessment, internal audits, and policy development, I am well-equipped to partner with you on this long-term journey. My approach involves meticulously keeping the risk register current, conducting gap-analysis internal audits to proactively identify control gaps, and ensuring that all policies align with ISO 27001:2022 standards. I will work closely with key process owners, remotely update artefacts on an agreed schedule, and deliver concise reports promptly. With a keen eye for detail and a deep understanding of ISO 27001:2022, Annex A, and the PDCA cycle, I am confident in consistently meeting your acceptance criteria. By entrusting me with this responsibility, you can rest assured that your ISMS will remain compliant and robust. I invite you to open a chat to discuss how I can seamlessly integrate into your team and provide the support you need. Sincerely, Rajesh
$12 AUD in 40 days
3.2
3.2

I’m an experienced ISO 27001 professional with strong knowledge of ISO 27001:2022, Annex A, risk management, internal audits, SoA, and PDCA. I can provide reliable long-term support, maintain your ISMS documentation, identify control gaps, and keep policies, evidence, and corrective actions audit-ready.
$11.99 AUD in 40 days
2.5
2.5

Hi, As a certified ISO/IEC 27001 Lead Implementer and Lead Auditor, based on your project, you will need to engage at least two persons if you want to fully outsource the maintenance of your ISMS. The fundamental reason is that an internal auditor cannot audit his/her own work. Therefore the role who reviews and updates your policies, maintains your SoA and conducts your risk management cannot conduct internal audits. So at minimum, you will need separate roles: 1 . One Lead Implementer to review and update policies and the other required documentation under Clauses 4 - 10; Track and update risk treatment plans, corrective and improvement actions, update security objectives, and conduct monitoring and measurement of metrics for management reviews of the ISMS. 2. An Internal auditor to conduct a gap analysis and internal audits of the management system ( focusing on requirements of Clauses 4 - 10) and review the quality of records and evidence being kept from the implementation of controls from Annex A. I can assist you with the internal auditing, but as I mentioned, another individual would need to fill the functions as mentioned in 1. above. Let me know when you are ready to proceed so we can start with the gap analysis.
$12 AUD in 40 days
0.0
0.0

Thank you for the opportunity to review your project summary. I understand that you have completed the technical analysis and now require a sharp editorial eye to refine the grammar, syntax, and overall academic flow of your financial modeling research paper—without altering any data, calculations, tables, or citations. I am pleased to submit this bid and would be honored to assist you in preparing your manuscript for submission or publication.
$12 AUD in 40 days
0.0
0.0

Hi, I took the time to carefully review your project, and I genuinely believe I understand the vision you're working to bring to life. Every great project starts as an idea, and my goal is to transform that vision into something that not only meets your expectations but exceeds them. With extensive experience in ISO 27001:2022, I can effectively manage the risk assessment, gap-analysis audits, and policy development you require. I understand the importance of maintaining compliance and ensuring your ISMS remains robust. For me, every project is more than just another job. I value building genuine, long-term relationships with my clients, founded on trust, transparency, and consistent communication. I want to become someone you can confidently return to whenever your business grows, evolves, or needs its next digital solution. Even if we don't end up working together, I'd still be happy to offer honest advice or point you in the right direction. I would be happy to offer a free consultation.
$8 AUD in 7 days
0.0
0.0

ISO 27001 expert with proven experience in risk management, internal audits, and policy updates ensuring compliance and continuous improvement.
$12 AUD in 36 days
0.0
0.0

INTRO We recently helped a client enhance their ISO 27001 compliance by streamlining their risk assessment and audit processes. I can help you maintain and improve your ISMS, ensuring it stays sharp and compliant with ISO 27001:2022. MIDDLE I understand your need for a security professional to take ownership of risk assessments, internal audits, and policy development. Keeping everything clean, professional, and user-friendly is essential for your ongoing success. With my expertise in ISO 27001, I can ensure that your risk register is always current and that your audits identify gaps before they become issues. I offer services in risk assessment, internal audits, policy development, and documentation maintenance tailored to your requirements. OUTRO Let's discuss how I can support your ISMS and ensure it remains robust and compliant. Kind regards, Anchel
$9 AUD in 7 days
0.0
0.0

Hi, Maintaining a certified ISMS is a different skill from building one — it's discipline, not heroics: a risk register that never goes stale, audits that catch what the external auditor would, and a policy library that reads like it was written this year, not at certification. That's the work I do. Financial-sector background in vulnerability and risk management (Qualys, Tanium, Bitsight, Power BI dashboards for leadership), and currently completing my ISO/IEC 27001 Lead Implementer (PECB) certification Against your three priorities: - Risk register & SoA — reviewed and re-scored on your quarterly cycle, SoA always traceable back to a real risk or requirement - Internal audits — clause 9.2 programme prioritizing your highest-risk areas, findings report with corrective actions inside your 5-day window - Policies — full annual review, 2022 terminology, proper version control and change log I've attached on my profile a sample risk register, treatment plan, and complete 93-control SoA so you can see the format and level of detail directly. Available to start now — happy to jump on a short call to look at your current register before we agree scope. Gilleadni Silva
$15 AUD in 10 days
0.0
0.0

Hello, Your project is a strong match for the work I focus on. Maintaining a live ISO 27001:2022 ISMS, keeping the risk register and Statement of Applicability current, running gap-analysis internal audits, and maintaining the policy library is exactly the kind of work I've built my GRC skills around. I recently completed an in-depth ISO 27001 project where I scoped an ISMS, built and scored a risk register, developed a risk treatment plan and SoA, selected Annex A controls, and performed an internal audit with documented findings and corrective actions (it's in my portfolio). So your three core activities; risk assessment & treatment, gap-analysis audits, and policy development are genuinely familiar territory for me. I'll be honest: I'm early in my freelance career, which is reflected in my rate, so you get thorough, careful, reliable work at real value. I understand this is a long-term partnership maintaining a real certified ISMS, and I'd treat that seriously: consistent delivery, clear reporting, proper version control, and meeting your quarterly and 5-day audit turnaround commitments. I'd love to discuss your current ISMS setup, your audit schedule, and how I can keep your evidence audit-ready. When would be a good time to talk? Best regards, Divine
$12 AUD in 13 days
0.0
0.0

Hi, I’d be an excellent fit for this long-term ISO 27001:2022 support role. I bring 8+ years of multinational experience across compliance, quality management, ISO 9001/14001/45001 and ISO 27001 environments, with strong hands-on experience in risk management, internal audits, corrective actions, documentation, and process improvement. I’m comfortable working with ISO 27001:2022, Annex A, risk registers, SoA, PDCA, evidence management, gap analysis, audit findings, and policy lifecycle management. My approach is practical and audit-focused: keep risks and controls aligned with actual business processes, identify gaps before external audits, maintain clear evidence, and ensure corrective actions are tracked to closure. I can work independently with your existing documentation and Excel-based risk register, collaborate with process owners remotely, and deliver consistently against your quarterly and annual acceptance criteria. I’d be happy to become your reliable long-term ISMS partner rather than simply a one-off auditor.
$15 AUD in 20 days
0.0
0.0

Hello, I am interested in supporting your organization in maintaining and continuously improving your ISO 27001:2022-certified ISMS. As a Senior Team Leader - Quality with extensive experience in audit management, compliance monitoring, risk assessment, CAPA, documentation control, and continuous improvement, I have successfully managed Internal, External, Client, Vendor, and Certification Audits across various ISO standards. I am comfortable working remotely, managing documentation in shared environments such as Google Drive, and delivering periodic updates according to an agreed schedule. I would welcome the opportunity to discuss how I can help maintain and enhance the effectiveness of your ISO 27001:2022 management system. Kind regards, Liton Bari Senior Team Leader Quality
$12 AUD in 20 days
0.0
0.0

Hi Team, Your requirement aligns well with my experience in ISO 27001:2022 ISMS governance, risk management, internal audits, and policy management. Since the core controls are already implemented, I understand that the priority here is maintaining the ISMS effectively, keeping documentation aligned with reality, and proactively identifying gaps before an external audit. I can support you on an ongoing basis across the three areas you highlighted: 1. Risk Assessment & Treatment - Maintain and periodically review the risk register. - Re-score risks when there are changes in processes, systems, vendors, or the business environment. - Review risk treatment plans and ensure they remain appropriate. - Keep the Statement of Applicability (SoA) aligned with the current risk posture and implemented controls. 2. Internal Audit & Gap Analysis - Plan audits around the ISO 27001:2022 requirements and applicable Annex A controls. - Conduct interviews with process/control owners and review supporting evidence. - Identify control/documentation/evidence gaps before the certification auditor does. - Prioritize findings based on risk and business impact. - Deliver a concise audit report with findings, recommendations, owners and corrective actions. 3. ISMS Policy Management - Align terminology and requirements with ISO 27001:2022. - Update policies as business processes evolve. - Maintain proper version control, approval history and change logs. Best regards, Rohit
$10 AUD in 20 days
0.0
0.0

Sydney, Australia
Payment method verified
Member since Jul 5, 2026
$250-750 AUD
$15-25 AUD / hour
$15-25 USD / hour
₹8000-15000 INR
$10-30 USD
₹1500-12500 INR
₹1500-12500 INR
₹600-1500 INR
₹12500-37500 INR
$250-750 USD
$10-30 USD
₹750-1250 INR / hour
$10-30 USD
$20000-50000 USD
min €36 EUR / hour
£10-20 GBP
$15-25 USD / hour
₹12500-37500 INR
₹12500-37500 INR
₹1000-5000 INR
€30-250 EUR
$15-25 USD / hour