Project Manager / Lead Auditor

Leads discussions for recommended changes in project management processes, standards and strategies. Oversees the acquisition, analysis and dissemination of subject matter knowledge. Conducts and reviews detailed analyses of costs/benefits, risks, workflow. In a consultative capacity, provides technical and business knowledge to clients. Develops position statements on complex subject matter questions. Provides resolution of major issues and manages project interdependencies and handoffs. Establishes project plans and manages deadlines.

Minimum Job Specs: Bachelors Degree in technology, finance, business or equivalent. MBA, CPA or CFA a plus.

At least 15+ years of related professional experience - either in financial operations or systems design.

Extensive knowledge of business functions. Excellent analytical skills. Excellent communication and presentation skills. Very strong management, project management and leadership skills. Very strong relationship management skills. PMP preferred.

Objectives:

• To meet the ISO 27001 internal audit requirement 9.2 of ISO 27001:2013, ISO 27001 requires an organization to perform at least one ISO 27001 internal audit at planned intervals for its information security management system (ISMS):

Deliverables:

• Define an audit plan for the engagement. Working with Charles River, identify who may need to provide additional information.
• Review Charles Rivers ISO27001 Information Security Management System (ISMS) through interviews with key personnel and collecting any artifacts necessary to produce a final report, such as policies or the ISMS Manual.
• Review compliance of the management system to the standard, including the ISO27001 standards clauses: Context of the organization, Leadership, Planning, Risk Analysis and Treatment, Objectives, Support, Operation, Performance Evaluation, Improvement.
• Review the selection, application and operation of ISO27001 Annex A controls and/or other selected controls in specifically identified business units.
• Review Corrective Action Plans (CAPs) created by Charles River to address previous findings. Advise if CAPs effectively address any findings.
• Provide a final report with a table of contents, findings, and recommendations.