Information Security Consultant

Ideagen•,

5d•Remote

About The Position

We're looking for a Compliance Consultant / Information Security Consultant to help organisations strengthen their information security, governance, and compliance capabilities. Working with a diverse client base, you'll support businesses on their journey towards achieving and maintaining certifications such as ISO 27001, while also helping them build effective security frameworks, governance processes, and risk management practices. This is a varied consulting role where no two client engagements are the same. You may be supporting a client through an internal audit ahead of a certification assessment, identifying gaps between their current controls and industry standards, or providing practical guidance on implementing governance, risk, and compliance best practices. You'll work closely with organisations of different sizes and levels of maturity, helping them improve their security posture and navigate evolving compliance requirements. We're particularly interested in someone who is eager to grow, enjoys solving problems, and can build trusted relationships with clients. While experience in information security and compliance is important, we're equally looking for someone with the curiosity, initiative, and drive to develop into a broader trusted advisor over time.

Requirements

You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
You possess a good understanding of ISO 27001 and information security management system principles.
You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
You are self-motivated, proactive, and comfortable taking ownership of your work and development.
You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.

Nice To Haves

Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.
ISO 27001 Internal Auditor certification.
Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.