Information Security Consultant
Core
Deliver governance, risk, and compliance (GRC) consulting engagements to strengthen client cybersecurity posture, including compliance assessments, certification projects, and ongoing security advisory.
Role type
Mid-level Information Security Consultant (GRC)
Builds
Security programmes, policies, risk registers, and control frameworks for diverse international clients
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Deliverable
client delivery
Required skills
GRC frameworks (ISO 27001, SOC 2, NIST), gap analysis, security programme design, audit preparation, remediation planning, stakeholder communication, project management
Preferred skills
vCISO experience, GRC platforms (Vanta, Drata, OneTrust), regional compliance frameworks (NIST SP 800-53, FedRAMP, CMMC, Cyber Essentials, POPIA, DPDP Act), professional certifications (CISA, CISM, CISSP, ISO 27001 Lead Implementer/Auditor)
Responsibilities
Conduct gap analyses and security posture assessments; Design and implement security policies and control frameworks; Guide clients through audit preparation and certification processes; Develop practical remediation plans; Provide ongoing security advisory and vCISO-style support; Lead client meetings and workshops; Translate technical requirements into actionable recommendations
Seniority
Mid-level, hands-on IC
