Information Security Consultant

Ideagen•,

31d•Remote

About The Position

Ideagen is seeking a Compliance Consultant / Information Security Consultant to help organisations strengthen their information security, governance, and compliance capabilities. The consultant will work with a diverse client base, supporting organisations pursuing and maintaining certifications such as ISO 27001 and helping them develop effective security frameworks, governance processes, and risk management practices. Client engagements vary and may include conducting internal audits ahead of certification assessments, identifying gaps between existing controls and industry standards, and advising on governance, risk, and compliance practices. The role works with organisations of different sizes and maturity levels to improve their security posture and respond to evolving compliance requirements. Ideagen is seeking a curious, proactive, relationship-oriented person who enjoys problem-solving and building client trust, and who may grow into a broader advisory role over time.

Requirements

ISO 27001 Internal Auditor certification.
Experience in information security, compliance, governance, risk, audit, or a related discipline.
Good understanding of ISO 27001 and information security management system principles.
Experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
Effective communication with a range of stakeholders and ability to present complex information clearly and practically.
Ability to identify problems, analyse requirements, and recommend pragmatic solutions.
Self-motivated and proactive, with the ability to take ownership of work and development.

Nice To Haves

Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools.
Exposure to ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders, from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.