i have been recently hired by an ISO 27001 certified company as an " internal ISO technical auditor".
My employer told me that my job is described as follow:
- this job is created because of the need of a technical resource who will take care of technical issues not organisational issues
- i am attached to the ISO team and not to the IT team
- i am going to take care of everything related to pentesting, log review, configurtation review, securing electronic threads, backup , ...
- defining physical and logical security measures that should be taken are not in my scope
i am a little bit confused and can't really understand my responsabilites, moreover i didn't find such job in the ISO norm.
i need to know if there is a such well known job , and what are it's real responabilites