To select the project manager for ISO 27001, you should choose someone from inside the company who has enough authority, either by position or by respect from their peers, to handle any opposition during the project. The project manager should have at least average knowledge of IT, a balanced knowledge of IT and the company's business processes, and good interpersonal skills to work well with the project sponsor. It is not recommended to hire an external consultant as the project manager.