Information Security Consultant

My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team.

This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients.

You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance., * Support the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).

• Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.
• Conduct internal audits and provide recommendations for improvement.
• Support clients with information security governance, risk and compliance activities.
• Manage third-party risk assessments and vendor security reviews.
• Deliver security awareness training and engage with stakeholders at all levels.
• Support the sales team with scoping client engagements and developing solutions.
• Contribute to business continuity and disaster recovery planning.
• Help develop and strengthen the wider GRC service offering.

• Strong experience within Information Security Governance, Risk & Compliance (GRC).
• Hands-on experience implementing and auditing ISO 27001.
• Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.
• Experience working within a Business Management System (BMS) aligned to ISO standards.
• Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.
• Experience with third-party risk management and vendor security assessments.
• Confident delivering security awareness training and presenting to stakeholders.
• Strong communication skills with the ability to work independently and collaboratively.

• Fully remote working.
• Limited travel to the office, approximately twice per month.
• Opportunity to work across a varied client base and develop a growing GRC offering.
• A varied role with the opportunity to make a real impact within the business.