Information Security Consultant

About the role

We are looking for a motivated Information Security Consultant to join a Governance, Risk, and Compliance (GRC) team and support organizations in strengthening their cybersecurity posture. In this role, you will deliver a broad range of consulting engagements, from compliance assessments and certification projects to ongoing security advisory and risk management.

What you'll do

• Deliver governance, risk, and compliance engagements aligned with recognized frameworks, including ISO 27001, SOC 2, NIST, and relevant regional standards
• Conduct gap analyses, security posture assessments, and maturity reviews to identify weaknesses and improvement opportunities
• Design and implement security programmes, policies, procedures, risk registers, and control frameworks tailored to client requirements
• Guide clients through audit preparation, certification processes, and external security assessments
• Develop practical remediation plans and monitor progress to ensure identified gaps are addressed effectively

What you need

• 2–5 yrs of experience
• ISO 27001
• CISA
• CISM
• CISSP
• Risk management
• Compliance
• Any graduate

Good to have

• Data privacy