Qureos Mentor

Allendevaux

<div>INFORMATION SECURITY &amp; PRIVACY GOVERNANCE LEAD (ISMS / PIMS) 

Are you an implementer-auditor who can turn security and privacy standards into living management systems? Do you enjoy building policies, risk registers, and control evidence&mdash;and then defending them before certification bodies? We are hiring an Information Security &amp; Privacy Governance Lead to establish, maintain and advise client teams on achieving and sustaining certification to ISO/IEC 27001, 27017, 27018, and 27701, with risk management based on ISO 27005 and ISO 31000 and close alignment to NIST frameworks. 
You will work side-by-side with engineering, DevOps, data/AI teams, and legal to embed security and privacy by design across customer environments. You will also work with customers to implement data protection and governance systems, and defend audits from external auditing agencies. 
<ul>
<li>
Location: Can work remote plus visit the office in Alexandria, Egypt (San Stefano) for team meetings.</li>
<li>Job Type: Full-time</li>
<li>Reports to: Head of Data Protection Practice.</li></ul> 


BACKGROUND

Allendevaux &amp; Company is a consulting firm that provides data protection as a service (DPaaS), staffing a service desk whereby customers submit data protection questions and receive rapid, intelligency advisory services. The company is also building Digital Trustify, a 25-module GRC platform that blends deep regulatory expertise with modern engineering. Your mission is to ensure our own house sets the benchmark&mdash;operating a robust, auditable ISMS/PIMS&mdash;and to help customers replicate that success. 
Must have a laptop that supports documentation work and Microsoft Teams meetings. Company will provide the software. 


EXPERIENCE

You have led at least one end-to-end ISO 27001/27701 implementation through external certification, run internal audits, and closed non-conformities. You are comfortable translating standards into practical controls for cloud environments (AWS/Azure/GCP), writing clear policies, and coaching teams through evidence collection and management review. 


PERSONAL CHARACTERISTICS &amp; SKILLS
<ul>
<li>Excellent communicator in English; able to brief executives and engineers with equal clarity.</li>
<li>Methodical, evidence-driven, and comfortable with audit-defensible record-keeping.</li>
<li>Pragmatic facilitator who balances governance with delivery timelines.</li>
<li>Strong collaborator across product, engineering, legal, and customer-facing teams.</li>
<li>Ethically minded; attentive to privacy, risk, and trust implications of modern data use.</li></ul> 


RESPONSIBILITIES
<ul>
<li>Stand up and own the Allendevaux ISMS/PIMS aligned to ISO/IEC 27001 and 27701, with cloud controls from 27017/27018; maintain policy suites, control catalogs, procedures, and KPIs.</li>
<li>Risk management: Establish and run risk assessment &amp; treatment processes per ISO 27005/ISO 31000; maintain risk registers and treatment plans.</li>
<li>Audit readiness &amp; defence: Plan internal audit cycles, coordinate management review, prepare evidence packs, engage certification bodies, and lead corrective/preventive actions.</li>
<li>Standards mapping: Maintain cross-walks to NIST CSF 2.0, NIST SP 800-53, 800-171, and relevant sectoral requirements.</li>
<li>Lifecycle integration: Partner with engineering/DevOps/AI teams to embed secure SDLC, access control, logging/monitoring, vendor-risk, data protection by design, and incident response.</li>
<li>Client enablement: Lead workshops, gap assessments, and readiness engagements to help customers implement integrated ISMS/PIMS programmes and defend external audits.</li>
<li>Training &amp; culture: Deliver role-based security/privacy training and awareness; champion continuous improvement.</li></ul> 


MINIMUM QUALIFICATIONS
<ul>
<li>Bachelor&rsquo;s degree in Information Security, Computer Science, Law/Policy, or related field.</li>
<li>ISO/IEC 27001 Lead Implementer (LI) and Lead Auditor (LA) certifications.</li>
<li>Demonstrated working knowledge of ISO/IEC 27017, 27018, 27701 and risk frameworks ISO 27005/31000.</li>
<li>Familiarity with NIST CSF, SP 800-53, and 800-171 and their practical application in cloud environments.</li>
<li>5 + years in security/privacy governance, compliance, or audit for technology products or services.</li></ul> 


PREFERRED QUALIFICATIONS
<ul>
<li>Master&rsquo;s degree in Information Security, Computer Science, or Law/Policy.</li>
<li>Additional certifications: ISO 27701 LI/LA, CISSP, CISA, CIPP/E, CIPM, or CIPT.</li>
<li>Experience working with certification bodies and consulting on multi-site or multi-tenant implementations.</li>
<li>Hands-on familiarity with GRC tooling (e.g., evidence repositories, control libraries, risk platforms) and secure SDLC practices.</li></ul> 


If you&rsquo;re excited to build audit-ready security and privacy programmes that are practical, defensible, and scalable&mdash;for us and for our clients&mdash;we&rsquo;d love to hear from you.</div>

INFORMATION SECURITY & PRIVACY GOVERNANCE LEAD (ISMS / PIMS)

<div>AI GOVERNANCE LEAD (ISO 42001 IMPLEMENTER &amp; AUDITOR) 
Standing up and stewarding AI Management Systems (AIMS) certified to ISO/IEC 42001&mdash;and helping our clients do the same. 
Are you an ISO 42001 practitioner who can turn responsible-AI principles into auditable practice? Do you enjoy building management systems, running internal audits, and defending them before external assessors? We are hiring an AI Governance Lead (ISO 42001 Implementer &amp; Auditor) to design, implement, and maintain Allendevaux &amp; Company&rsquo;s AIMS and to advise client teams on obtaining and sustaining ISO 42001 certification. 
You will partner with the AI Systems Architect, ML/MLOps, Prompt Engineering, Security, and Legal to embed governance controls throughout the model lifecycle&mdash;so our AI services are trustworthy, compliant, and ready for external scrutiny. 
BACKGROUND

Allendevaux &amp; Company is building Digital Trustify, a 25-module GRC platform that embeds AI at its core. Our mission is to make advanced compliance effortless for enterprises. Your role ensures that the way we build and operate AI is itself governed to the highest standard&mdash;internally and for our clients. 
Must have a laptop that supports documentation work and Microsoft Teams meetings. Company will provide all software. 
EXPERIENCE

The ideal candidate has implemented one or more management systems in practice (ISO 42001, and/or ISO 27001/27701), led internal audits, and guided teams through external certification. You should be comfortable translating standards into policies, controls, records, and metrics across AI data pipelines and model operations. The ideal candidate must hold ISO 42001 implementer certification and auditor certification. 
PERSONAL CHARACTERISTICS &amp; SKILLS
<ul>
<li>Excellent communicator in English, able to brief executives and engineers with equal clarity.</li>
<li>Methodical and evidence-driven; insists on traceability, version control, and audit-ready artefacts.</li>
<li>Collaborative and pragmatic&mdash;balances governance with delivery timelines.</li>
<li>Strong facilitator capable of running workshops and corrective-action reviews.</li>
<li>Ethically minded, with a firm grasp of risk, bias, security, and privacy implications of AI.</li></ul> 


RESPONSIBILITIES
<ul>
<li>AIMS build-out: Establish and maintain the ISO 42001-aligned AI Management System (policies, procedures, control catalogue, metrics, records, and governance forums).</li>
<li>Risk &amp; impact management: Operationalise AI risk assessment in line with ISO 23894; coordinate model/AI impact assessments; maintain risk registers and treatment plans.</li>
<li>Lifecycle gates: Define and enforce model-lifecycle checkpoints (data governance, training/finetuning approval, evaluation/guard-rails, release/rollback criteria) in collaboration with AI Engineering and MLOps.</li>
<li>Assurance &amp; audits: Plan and run internal audits; manage management-review meetings; coordinate external audits; draft and track CAPA for non-conformities.</li>
<li>Cross-standard mapping: Maintain crosswalks to ISO 27001/27701, SOC 2, NIST AI RMF 1.0, and (as applicable) EU AI Act readiness; align with privacy and security requirements.</li>
<li>Client enablement: Lead workshops and readiness engagements to help client teams implement ISO 42001; prepare evidence packs and defend audits with external assessors.</li>
<li>Training &amp; culture: Develop role-based training for engineers, product, and leadership; champion responsible-AI practices and continuous improvement.</li>
<li>Records &amp; reporting: Keep audit-ready documentation (policies, model cards, data sheets, evaluation reports, change logs) and report governance KPIs to the CAIO.</li></ul> 


MINIMUM QUALIFICATIONS
<ul>
<li>Bachelor&rsquo;s degree in Computer Science, Information Security, Data/AI, or related field.</li>
<li>ISO 42001 Lead Implementer certification and ISO 42001 Lead Auditor certification.</li>
<li>5+ years in governance, assurance, or compliance for technology products, including hands-on experience with management systems (e.g., ISO 42001, ISO 27001, 27701).</li>
<li>Practical familiarity with AI/ML delivery (MLOps, dataset governance, evaluation/guard-rails) and with security/privacy control design.</li></ul> 


PREFERRED QUALIFICATIONS
<ul>
<li>Master&rsquo;s degree in Law/Policy, Information Security, or Computer Science.</li>
<li>Additional certifications (ISO 27001 LI/LA, CIPP/CIPT/CIPM, or NIST-focused credentials).</li>
<li>Experience preparing organisations for public-sector or federal compliance.</li>
<li>Working knowledge of bias/fairness testing, model documentation (model cards, data sheets), and AI incident response.</li>
<li>Prior consulting experience leading external ISO readiness projects.</li></ul> 


If you are excited to operationalise responsible AI&mdash;so that models clear audits without slowing innovation&mdash;we&rsquo;d love to hear from you.</div>

AI GOVERNANCE LEAD (ISO 42001 IMPLEMENTER & AUDITOR)

Join Allendevaux and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Allendevaux

ABOUT_COMPANY

INFORMATION SECURITY & PRIVACY GOVERNANCE LEAD (ISMS / PIMS)

AI GOVERNANCE LEAD (ISO 42001 IMPLEMENTER & AUDITOR)