Trainee (Good) Assessor — (ISO/IEC 27001 & ISO/IEC 42001)

Remote, anywhere in Australia · Full-time or a three or four-day week · Salary negotiable based on experience, with a clear scale-up plan as you're signed off

Somewhere along the way, getting certified started to feel like a root canal. People take sick days. Teams go quiet. The auditor shows up and everyone just wants it over.

We think that's a shame. Underneath every audit is something worth celebrating: a business trying to get better, and a team willing to look honestly at their own work.

That's why we started A Positive Certification Group: we believed an audit could feel completely different, not something done to a business, but with it.

Talani and I run this company with a simple mission: to prove that certification can be a force for good, and we're looking for someone to join us.

Who we are

We're the world's first B Corp certified, JAS-ANZ accredited ISO certification body, auditing and certifying organisations across the globe against ISO 9001, 14001, 45001, 27001, 27701 and 42001. We exist to improve the organisations we work with, the people inside them, and the communities we all live in. Through our Certified with Impact approach, 5% of our revenue goes into The Good Fund, backing community, healthcare and wellbeing initiatives.

We're one of the few (literally one of four) certification bodies in the world accredited by JAS-ANZ to certify organisations to ISO/IEC 42001, the AI management system standard, so we're looking for our next Good Assessor, with an IT background, for us to train to audit some of the coolest companies and master both ISO/IEC 27001 and ISO/IEC 42001.

Why now

It's an exciting time to join, and you'd be coming in early. We're a small team building one of the most innovative certification bodies around, in an industry that hasn't changed much in decades. The way we audit, the way we report, the way we price, the way we give back: we've rebuilt all of it, and we're not done. Join now and you help shape how it works, rather than inheriting how it's always been done.

The kind of audit we deliver

We're not here to catch anyone out. We're collaborators: we have real conversations, work out what's working and what isn't, and leave people with clear, practical findings and opportunities for improvement in plain language. Not a 100-page AI generated report nobody reads. Our clients deserve an assessor who's genuinely interested in their business,



not someone reading from a checklist and watching the clock.

And the clients are the best part. Many are among the most exciting, fast-moving companies around: AI-native startups, scale-ups shipping AI products worldwide, and established businesses rebuilding themselves around AI. You'll be in the room while they work out how to do it properly, seeing how the best of them run before most people have heard of them. There aren't many jobs that put you at the front of AI-native work without asking you to write the code.

How the training works

For the right person, we'll pay for your lead auditor course if you don't already have it. Then you'll shadow our senior assessors (including our CEO, who still leads audits) for around 20 audit days, learning our method, our reporting style and how a "Good Audit" runs from start to finish (opening to closing meeting)!

Once you're signed off as an Assessor, you'll run surveillance audits and join certification audit teams. From there it's Lead Assessor for ISO 27001, then ISO 42001 as your second scheme. How fast you get there is mostly up to you.

What we're looking for

We're genuinely excited to tell you about a job most people don't know exists (but is actually really cool…well, we think so).

We're after a Trainee Assessor for information security (ISO 27001) and AI management systems (ISO 42001). Ideally you've spent a few years in an IT role and you're ready for a different kind of challenge, but we're really after more than a CV. We want a good human who likes to challenge themselves, is keen to keep developing, and above all loves connecting with people.

Emotional intelligence matters here. Audits can be stressful and anxiety-inducing, and it's our job to recognise that and put people at ease. We also love nerding out, so if spending an hour talking with a client about their technical controls or how they are responsibly using AI sounds like a good time, we're excited to meet you.

We'd love to hear from you if you:

- two to four years in IT , ideally with two where security was part of the job . Sysadmin, MSP engineer,



cloud or infrastructure engineer, IT manager, security analyst: all count.
- Can explain security to a non-technical person without making them feel small.
- Lead with curiosity , take feedback well , and love to learn .
- Write clearly and with an eye for detail . Your reports go to boards and to our accreditation body, so they need to be something we're all proud of and be the "memory of the awesome audit experience the client just had".
- Take the work seriously without taking yourself too seriously . We're looking for someone who keeps things human while still assessing organisations.
- Are based in Australia with the right to work here, and are happy to complete a national police check.

Nice to have, not required: an ISO 27001 lead auditor course; CISSP, CISM, CISA or IRAP; hands-on exposure to AI or machine learning; or having been on the receiving end of an audit yourself.

What we offer

- Salary that grows with you . We'll train you up to a signed-off Lead Assessor for ISO 27001 and ISO 42001, and pay you accordingly as you go.
- Fully remote , anywhere in Australia, with the occasional on-site audit.
- Three days, four days or full time , based on your experience and the right fit.
- Volunteer leave , because we love getting out and helping our community and we'd love you to be part of it.
- The usual good stuff: 4 weeks annual leave, 10 days personal leave, and 12% super on top of your salary.
- Your lead auditor course covered , and travel (where required) on us.
- Constant learning. New schemes, standards, conferences, courses: as the field evolves, so do you. Auditing AI governance in 2026 means learning constantly!
- An annual team get-together , somewhere worth the trip, to plan, dream big, and eat well.
- A small but mighty team where your ideas are heard and acted on. A real chance to help shape the future of a world's first: a certification body that's valuable for the world!

A note on belonging

We're building a team that reflects the world we work in. We warmly welcome applicants of every gender, background, culture, age, ability and life experience, and we know brilliant people don't always tick every box on a list.

If this role speaks to you but you're not sure you meet every point, we'd still love to hear from you. And if there's anything we can do to make our process more accessible or comfortable for you, just say the word.

#J-18808-Ljbffr

📌 Trainee (Good) Assessor — (ISO/IEC 27001 & ISO/IEC 42001) (We'll train you to audit!)
🏢 A Good Certification Group (formerly Certification Oceania)
📍 Australia