IT Technical Writer (ISO Readiness)
Location: United States (Remote / Hybrid – Columbus, OH)
6 months Engagement Type: Contract Domain: Cybersecurity, GRC, ISO Compliance
Role Overview
Seeking a US-based IT Technical Writer to support ISO readiness and compliance initiatives, with a strong focus on documentation required for ISO 27001, ISO 27017, ISO 27018, and SOC 2. The role is documentation-intensive and works closely with cybersecurity, GRC, IT, and business stakeholders to ensure audit-ready artifacts.
Key Responsibilities
ISO & Compliance Documentation
Develop, review, and maintain documentation required for ISO certification readiness, including:
ISMS policies, standards, and procedures
Control narratives and supporting documentation
Risk assessment and risk treatment documentation
Statements of Applicability (SoA)
Ensure documentation aligns with ISO control requirements and audit expectations.
Audit Readiness Support
Support internal ISO readiness activities by:
Structuring and organizing audit evidence
Maintaining version-controlled document repositories
Updating documentation based on gap assessment outcomes
Assist control owners in documenting processes and controls in an audit-friendly manner.
Stakeholder Collaboration
Work with US-based cybersecurity, GRC, IT, cloud, and application teams to:
Translate technical and operational controls into clear documentation
Capture existing processes and map them to ISO requirements
Coordinate with compliance leads and project managers to track documentation deliverables and readiness status.
Documentation Governance
Apply documentation standards, templates, and formatting guidelines.
Manage document lifecycle including drafting, review, approval, and updates.
Ensure consistency, traceability, and audit defensibility across all ISO documentation.
Required Qualifications
5–8+ years of experience as an IT Technical Writer, Compliance Writer, or Documentation Specialist.
Hands-on experience supporting ISO 27001 readiness or audit preparation.
Strong understanding of:
Information security concepts
IT controls and governance frameworks
ISO documentation structure and audit expectations
Excellent written and verbal communication skills.
Experience working with cross-functional US-based teams.
Preferred Qualifications
Experience with SOC 2 documentation and audit support.
Familiarity with GRC or document management tools.
Exposure to cybersecurity, cloud security, or enterprise IT environments.
ISO 27001 Lead Implementer / Auditor or similar certification (nice to have).
Deliverables
Audit-ready ISO policies, procedures, and standards
Control documentation and supporting artifacts
Well-organized, version-controlled evidence repositories