Job Description: Contract Manager (Cybersecurity & ISO 27001 Focus)
Position Summary:
Our client are seeking an experienced Contract Manager with a strong background in cybersecurity and ISO 27001 requirements to oversee, negotiate, and manage contracts across the organization. The ideal candidate will ensure that all contractual agreements meet security, regulatory, and organizational standards while supporting risk mitigation and ongoing compliance efforts. This role requires exceptional attention to detail, strong communication skills, and deep understanding of cybersecurity frameworks and information security standards.
Key Responsibilities
*
Review, draft, and negotiate a wide range of contracts, including service agreements, data processing agreements, NDAs, vendor contracts, and security-related addendums.
*
Assess contracts for compliance with cybersecurity standards, regulatory requirements, and internal security policies.
*
Perform detailed ISO 27001–aligned contract reviews, ensuring controls related to data protection, access management, supplier relationships, and incident response are adequately addressed.
*
Work closely with Legal, Security, Procurement, and Risk teams to ensure all contracts align with organizational risk tolerance and compliance needs.
*
Identify contractual risks related to information security and propose mitigation strategies.
*
Serve as a subject-matter expert on security clauses, standards, and obligations within contractual frameworks.
*
Maintain organized records of contract versions, approvals, obligations, renewals, and expirations.
*
Support the development and continuous improvement of contract templates, security appendices, and review processes.
*
Monitor vendor compliance with contractual security requirements and collaborate on remediation plans when needed.
*
Stay informed of emerging cybersecurity regulations, best practices, and ISO updates to ensure ongoing alignment.
Qualifications
*
Bachelor’s degree in Law, Business Administration, Information Security or a related field.
*
Proven experience as a Contract Manager, Contract Analyst or similar role.
*
Demonstrated knowledge of ISO 27001 and cybersecurity risk management.
*
Experience reviewing and negotiating data protection clauses, security requirements, and supplier security obligations.
*
Strong understanding of cybersecurity frameworks (e.g., NIST, CIS Controls, SOC 2) is a plus.
*
Excellent negotiation, communication, and stakeholder management skills.
*
Strong analytical and organizational abilities with exceptional attention to detail.
*
Ability to interpret complex technical concepts and translate them into contract language.
*
Experience supporting or auditing ISO 27001 certification or surveillance processes.
*
Familiarity with privacy regulations (GDPR, CCPA, or other data protection laws).
*
Experience with contract lifecycle management (CLM) systems.
*
Legal or security certifications such as CIPP/E, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor