> Markdown version of [/jobs/ext/4612368-information-security-consultant](https://www.wearedevelopers.com/jobs/ext/4612368-information-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Consultant

- **Company:** Digital Waffle
- **Location:** UK (Remote available)
- **Salary:** £70,000.0 - £71,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management System, National Institute of Standards and Technology Cybersecurity Framework
- **Published:** November 7, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5956109825

## About the Role

* Strong experience within Information Security Governance, Risk & Compliance (GRC).
 * Hands-on experience implementing and auditing ISO 27001.
 * Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.
 * Experience working within a Business Management System (BMS) aligned to ISO standards.
 * Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.
 * Experience with third-party risk management and vendor security assessments.
 * Confident delivering security awareness training and presenting to stakeholders.
 * Strong communication skills with the ability to work independently and collaboratively.

## Description

My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team.

This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients.

You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance., * Support the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).

 * Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.
 * Conduct internal audits and provide recommendations for improvement.
 * Support clients with information security governance, risk and compliance activities.
 * Manage third-party risk assessments and vendor security reviews.
 * Deliver security awareness training and engage with stakeholders at all levels.
 * Support the sales team with scoping client engagements and developing solutions.
 * Contribute to business continuity and disaster recovery planning.
 * Help develop and strengthen the wider GRC service offering.