Digital Waffle

Information Security Consultant

  • Salary: £60000 - £75000 per annum
  • Location: England
  • Job type: Permanent
  • Sector: Cyber Security
  • Reference: 637445
  • Consultant: Samuel Williams

Information Security Consultant

Remote | Limited Office Travel (Twice a Month) | Up to £75,000

My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team.

This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients.

You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance.

Key Responsibilities

  • Support the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).
  • Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.
  • Conduct internal audits and provide recommendations for improvement.
  • Support clients with information security governance, risk and compliance activities.
  • Manage third-party risk assessments and vendor security reviews.
  • Deliver security awareness training and engage with stakeholders at all levels.
  • Support the sales team with scoping client engagements and developing solutions.
  • Contribute to business continuity and disaster recovery planning.
  • Help develop and strengthen the wider GRC service offering.

Skills & Experience

  • Strong experience within Information Security Governance, Risk & Compliance (GRC).
  • Hands-on experience implementing and auditing ISO 27001.
  • Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.
  • Experience working within a Business Management System (BMS) aligned to ISO standards.
  • Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.
  • Experience with third-party risk management and vendor security assessments.
  • Confident delivering security awareness training and presenting to stakeholders.
  • Strong communication skills with the ability to work independently and collaboratively.

What's on Offer?

  • Salary up to £75,000.
  • Fully remote working.
  • Limited travel to the office, approximately twice per month.
  • Opportunity to work across a varied client base and develop a growing GRC offering.
  • A varied role with the opportunity to make a real impact within the business.

Apply now.

Please note:

Due to the high volume of exceptional CVs we receive, we may not be able to respond to each candidate individually. However, we'll carefully review your CV to see if it aligns with our current job openings. If your skills are a perfect match, a recruiter will be in touch to discuss the opportunity further.