Primary Responsibilities:

  • Management system audits in HK, China, Macau, and occasionally in other countries/regions. (Primarily remote audits during the pandemic with travel restrictions.)
  • The standards cover ISO 27001, ISO 27701, etc.
  • Other standards may be covered, depending on the candidate's background and qualifications, such as ISO 9001, TISAX, etc.
  • Management role may be offered depending on the candidate's desire and background.


  • Degree holder or higher.  (important)
  • 10+ years' working experience, including 4+ years' in information security field.
  • Fluent written and oral English and Chinese. (Important)
  • A PECB, Exemplar, DGQ, IRCA, or CCAA certified 5-day ISO 27001 Lead Auditor Training Certificate is an advantage.
  • It’s an advantage if the candidate can provide 2nd or 3rd party audit log for 20 days against ISO 27001.
  • Knowledge in GDPR or Privacy Impact Assessment is advantage, but not necessary.
  • Qualification of CISA, CISSP, CEH, CIPP, CIPM or CDPO is advantage, but not necessary. 
  • Either employment or freelance approach.


For employed auditors, the remuneration scheme will include basic salary for employed auditors and extra audit days allowance. For freelance auditors, the service see will be based on audit days.
zertifizierung-dqs-drei geschaeftspartner sitzen an tisch und mann und frau schuetteln sich die hand


Interested parties, please send your full resume with CURRENT and EXPECTED salaries to

The PRODUCTS or SERVICES of each company you have worked in, and your ROLES shall be described in your resume. If you don’t receive our reply within 2 months, you can consider your application is not successful at present.

Job ads

Haven't found the right one for you yet? Feel free to take another look at our overview.
Back to the overview