ISO 27001 Implementation Consultant

Contract: Initial 3 months, potentially extending to 6 months INSIDE IR35

Start: October 2026

Day rate: Dependent on experience

NRG is supporting a life sciences organisation that is beginning an ISO 27001 implementation within one of its departments.

We are looking for an experienced ISO 27001 Implementation Consultant who can provide expert direction while taking a hands‑on role in delivery. This is not a purely advisory or audit-focused assignment.

Key responsibilities:

• Assess the current position, conduct a gap analysis and identify areas of non‑compliance
• Develop the ISMS, including policies, procedures, risk registers, treatment plans and the Statement of Applicability
• Recommend and support the implementation of practical technical and security controls
• Gather evidence and prepare the department for internal and external audits
• Transfer knowledge to the internal team and help create an approach that can be rolled out across other departments and operating companies

Key requirements:

• Proven experience of delivering an ISO 27001 implementation from an early stage
• Strong knowledge of ISO 27001:2022, information security risk management and control implementation
• A technical, security engineering or information security background
• Strong documentation, stakeholder engagement and knowledge‑transfer skills
• Experience within life sciences, pharmaceuticals or another regulated environment would be advantageous

Relevant ISO 27001 qualifications are beneficial, but practical implementation experience is essential.

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic.

Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero‑tolerance policy for breaches of our Equality and Diversity policy.