_{16th March, 2026}

ISO 27001 Implementation Lead
Sydney location preferred but open to Australia remote/hybrid.

FromHereOn is a ~30-person management consulting firm based in Sydney. We are seeking a contractor to lead our ISO 27001:2022 certification over approximately 3 months at 3-4 days per week.
We are using Vanta (GRC platform), which provides:

• Pre-built policy templates
• Automated evidence collection
• Control mapping to ISO 27001

Because of this, the role is focused on tailoring, implementation, and driving the certification process, rather than creating an ISMS from scratch. This significantly reduces the authoring workload and allows for a broader candidate pool than a traditional ISO 27001 implementation role.

What We Need the Person to Do:
This resource will take ownership of delivering ISO 27001 certification, including:

• Configure and manage Vanta for ISO 27001 (controls, integrations, evidence collection, readiness dashboard)
• Tailor Vanta policy templates to suit a ~30-person consulting firm delivering remote services to government and healthcare clients
• Run the risk assessment process and obtain leadership sign-off
• Conduct the internal audit
• Manage the certification body engagement through Stage 1 and Stage 2 audits
• Hand over the ISMS to an internal owner at the end of the engagement

Must-Have Skills & Experience:

• They have personally led at least one ISO 27001:2022 certification to completion (not just contributed or audited)
• Hands-on experience using Vanta for ISO 27001 specifically (not only SOC 2)
• Ability to operate as the single accountable person (there is no internal security team)
• A pragmatic, right-sized approach suitable for a small consulting firm rather than enterprise-scale frameworks

Apply now or contact talent@fromhereon.com for a confidential discussion.

***Please note we are only able to consider resource that is based in Australia with full working rights.***

Apply For Job