ISO 27001 Auditor - Spanish Lanugage

Position Summary We are seeking a detail-oriented, bilingual ISO 27001 Auditor / GRC Consultant fluent in both English and Spanish to lead and support security framework implementations and readiness audits for our international client base. In this role, you will evaluate client information security management systems (ISMS) against ISO 27001:2022 standards, review technical controls, guide clients through risk assessments, and conduct audit readiness assessments. The ideal candidate possesses deep technical familiarity with information security frameworks and can seamlessly communicate complex audit findings to executive stakeholders in both English and Spanish. Key Responsibilities ISMS Auditing & Assessments: Plan and execute gap analyses, internal audits, and readiness assessments against the ISO 27001:2022 standard (and related frameworks like SOC 2 or CMMC where applicable). Documentation & Policy Review: Evaluate client security policies, risk treatments, Statement of Applicability (SoA), and technical evidence to ensure audit readiness. Client Guidance & Advisory: Provide actionable, expert guidance to international clients (specifically across Latin America and Spain) on closing compliance gaps and implementing Annex A controls. Bilingual Communication: Conduct client-facing interviews, workshops, and review sessions fluently in Spanish and English; translate technical security concepts and audit reports accurately between both languages. Cross-Functional Collaboration: Partner with internal GRC teams, automated compliance platforms (e.g., Vanta, Drata), and external external audit partner firms to streamline the certification lifecycle. Qualifications & Requirements Experience: Minimum 3 to 5 years of hands-on experience in information security auditing, risk management, or ISO 27001 implementation. Language Proficiency: Professional fluency in both English and Spanish (written and verbal) is strictly required. Ability to review technical documentation and draft formal audit reports in Spanish. Certifications (Required/Preferred): Certified ISO 27001 Lead Auditor (IRCA or equivalent) preferred. Additional credentials like CISSP, CISA, or CRISC are a strong plus. Technical Knowledge: Comprehensive understanding of Annex A technical controls (access management, cryptography, network security, asset management, and vulnerability management). Communication Skills: Strong advisory presence with the ability to push back professionally, manage client expectations, and articulate technical risk to non-technical stakeholders. Axipro is a fast growing global compliance automation and cybersecurity consultancy operating across the globe. Recognized as a premier trusted advisor, we serve as the ultimate trusted advisor for organizations securing their digital frontiers guiding international companies through the complexities of 20+ regulatory frameworks including SOC 2, ISO 27001, ISO 42001, ISO 9001, HIPAA, and CMMC while providing elite Penetration Testing services to secure their tech stacks. We specialize in Quality Management Systems, Health Safety Environment Management Systems and Information Security Management Systems. At Axipro, we leverage top-tier automation platforms combined with human expertise to deliver seamless, end-to-end compliance architectures. We are dynamic, results-driven, and scaling fast. If you are passionate about cybersecurity, tech-driven consulting, and making a tangible impact on a global scale, we want to hear from you.