Internal Auditor

**ROLE OVERVIEW**:
Croud is a global, full service digital marketing agency with a unique business model that helps businesses drive sustainable growth in the new world of marketing. Croud was recently named a Sunday Times Best Place to Work for the second year in a row, and was named Performance Marketing Employer of the Year by PMW.

At Croud, we unlock potential by elevating our people, clients, and communities within a rapidly advancing and complex economy. We operate as a unique scaled network of Intelligent, Creative Specialists, enabling us to deliver superior brand outcomes and unlock potential for our people, our clients and our communities.

Our culture is strategically driven and inspired by a shared long-term vision. It is collaborative and connected, with a focus on continuous learning and mutual support.

We are energised by future thinking, driving innovation to achieve better outcomes. We are instinctively generous, actively including and empowering our people. Above all, we are purpose-driven, committed to positively impacting our people, the planet, and our global communities.

**RESPONSIBILITIES**:

- Key responsibilities across two areas: supply chain auditing and ISO auditing, although auditing across other areas of the business will be required from time to time.
- Oversee and complete annual required and desired audits of ISO27001 ISMS framework in tangent with internal audit team
- Thoroughly and meticulously document audits schedules, plans, reports, OFIs and NCs observed in relation to the ISO27001 standard
- Attend ISO external audits with ISMS Manager as requested
- Keep abreast of all laws and policies pertinent to the ISO27001 standard; track and monitor any changes to such laws and feedback to the wider team
- Assist in upholding adherence to Croud's operational policies and processes within the agency; supporting with access audits and any other requested audits relevant to the agency
- Work with the contracts and access team to help develop and improve processes and knowledge across the teams

**PERSON SPECIFICATION**:

- ISO27001 Lead Auditor certified is a must, other auditing certifications would be a plus but not essential
- Previous experience in an inhouse auditing role, particularly in supply chain management and ISO27001
- Familiarity with the ISO27001 framework is required, knowledge of similar security frameworks or other ISO certifications is also valuable
- Proficiency in conducting onboarding and regular audits of third-party vendors or the ability to complete third-party assessments
- Understanding of contractual matters related to compliance, including adherence to advertising regulations and relevant laws
- Experience in data protection, including implementing Data Protection Impact Assessments (DPIAs), knowledge of Records of Processing Activities (RoPAs), Data Processing Agreements (DPAs), and data workflow management
- Hands-on, problem-solving mindset with a curious and proactive approach to troubleshooting
- Technical competence in supply chain management, spreadsheet management, process optimisation, automation opportunities, and supply chain software management and development
- Strong research skills to stay updated on regulatory changes, industry trends, and developments that could affect the business's operations
- Exceptional administrative, time management, and prioritisation skills to support the above responsibilities
- Effective communication and negotiation abilities to engage with people at all levels and facilitate the business' compliance journey

**COMPANY BENEFITS**:
Croud operates a hybrid working model with a **minimum of 3 days a week** based in our **Shrewsbury office** and the remaining days from home if you wish.

Croud offers a clear path to progression for all members of staff. We are committed to offering development opportunities alongside a support system of regular performance reviews. The opportunities are endless

On completion of the three-month probation period, every employee is eligible for the benefits listed on our careers site which include:

- 25 days holidays holiday per year with the option to purchase an additional 5 days
- Discretionary annual performance based incentive
- Sales Commission
- Sabbatical: Paid sabbatical at 7 years with an option to take it unpaid at 5 years
- Recruitment Referral Bonus
- Health & Wellbeing Contribution
- Ride to Work Scheme
- Railcard & Season Ticket Loan
- Home Office Equipment (chair and screen)
- Office Perks: Free fruit, breakfast cereals, lunches twice a week, snacks, and tea/coffee
- Enhanced Family Leave: Including primary and secondary family leave, extended parental leave, and shared family leave.
- Life Assurance & Income Protection
- Medical Cash Plan
- Pension
- Learning & Development: Access to Croud Campus, curated third-party learning platforms, and an IPA Membership with subsidised training and events
- Peer Recognition: Through our “Bonusly” program
- Team Off-Si