ISO 27001 Network Security Compliance Support

I need an experienced network-security specialist to guide us through ISO 27001 compliance. Our infrastructure is already segmented behind NG firewalls, but we have not yet aligned every control, document set, and monitoring practice with the standard. The engagement centres on analysing our current network posture, identifying the exact gaps against ISO 27001 Annex A controls, and then implementing or fine-tuning the technical safeguards that will satisfy the external auditor.

What I expect you to handle
• Gap analysis of existing network architecture and security policies against ISO 27001 requirements
• Practical remediation plan with priorities, owners, and realistic timelines
• Configuration hardening or rule-set adjustments (switching, routing, firewall, VPN, IDS/IPS) carried out remotely in coordination with our IT team
• Creation or update of required artefacts: risk register entries, Statement of Applicability, network-specific SOPs, and evidence logs
• Pre-audit walkthrough to make certain every mandatory control can be demonstrated

Acceptance criteria
Your work is considered complete when an independent ISO 27001 auditor confirms closure of all network-security non-conformities and accepts the evidence pack you prepare.

Strong familiarity with ISO 27001 clauses, Annex A controls, and hands-on experience in network hardening are essential. Tools you are comfortable with—whether they are Nmap, Nessus, Wireshark, or enterprise SIEM platforms—are welcome, so long as they align with best practice and do not interrupt business operations.

The project will be executed fully remote; most tasks can be scheduled during EU business hours, but I can accommodate occasional off-hours maintenance windows for live configuration changes.