Information Security Consultant

Governance, Risk and Compliance

• Lead or support the implementation, maintenance and internal auditing of Information Security Management Systems (ISMS) aligned to ISO/IEC 27001:2022.
• Assist clients in developing security policies, standards and procedures covering all core domains.
• Conduct maturity assessments against ISO 27001, NIST CSF, CIS Controls, DSPT, and other recognised frameworks.
• Deliver GDPR compliance assessments, support DPIAs, ROPAs, and advise on privacy-related control gaps.

Risk Management

• Facilitate risk assessments, threat identification, and risk treatment planning, including development of security risk registers.
• Advise on appropriate control selection aligned to business context, risk tolerance and regulatory obligations.
• Support clients in establishing ongoing risk governance, including risk committees, management reporting and oversight processes.

Audit, Assurance and Certification

• Prepare organisations for external certification audits (ISO 27001, ISO 22301, DSPT).
• Perform internal audits and readiness assessments, identifying non-conformities, observations and improvement actions.
• Produce well-structured audit reports, dashboards and action plans for senior management.

Incident Management & Business Continuity

• Support clients in tabletop exercises, and resilience planning activities.
• Advise on alignment to ISO 22301, DORA, NIS2, and sector-specific resilience requirements.

Client Delivery & Consultancy

• Act as a trusted advisor to client leadership, translating technical issues into clear, business-focused recommendations.
• Produce professional documentation, including policies, roadmaps, risk reports, and board-level updates.
• Manage multiple engagements concurrently, ensuring high-quality outputs and strong client satisfaction.
• Contribute to the continued development of Omni’s methodologies, templates, and best-practice guidance.

Do you have experience in NIST standards?, Technical & Framework Expertise

• Strong working knowledge of ISO/IEC 27001:2022 (essential).
• Practical experience with NIST CSF assessments or implementation.
• Solid understanding of GDPR principles, data protection impact assessments, and privacy governance.
• Familiarity with supplementary frameworks or regulations (e.g. CIS Controls, DORA, NIS2, SOC 2, ISO 22301) is highly desirable.

Consultancy Skills

• Demonstrable experience in client-facing roles within security, audit or GRC.
• Ability to produce concise, clear and well-structured documentation suitable for senior stakeholders.
• Strong analytical and problem-solving capabilities.
• Comfortable working independently and able to “hit the ground running”.

Industry Certifications (desirable but not mandatory)

• ISO 27001 Lead Implementer / Lead Auditor
• CISM, CISSP, CRISC, CISA