Information Security Consultant

I’m working with a fast-growing cyber and digital risk consultancy supporting organisations in strengthening their information security posture, aligning to industry frameworks, and managing cyber risk at a strategic level.

They’re looking for an Information Security Consultant with strong experience across security frameworks, risk management, and security maturity assessments.

What you’ll be doing

• Delivering information security assessments aligned to frameworks such as ISO 27001, NIST CSF, and CIS Critical Security Controls
• Supporting and leading ISO 27001 implementations, including gap assessments, readiness, and continuous improvement
• Conducting cyber security maturity and capability assessments across people, process, and technology
• Identifying risks and advising on pragmatic security improvements aligned to business objectives
• Developing and enhancing information security policies, standards, and governance frameworks
• Producing clear, impactful reports and presenting findings to senior stakeholders
• Supporting clients in building and maturing their overall security strategy and roadmap
• Mentoring and supporting junior consultants within engagements

What’s needed

• 3–5 years’ experience in Information Security / Cyber Security roles, ideally within a consulting or advisory environment
• Strong experience working with ISO 27001, NIST CSF, and/or CIS frameworks
• Proven background in security risk assessments, gap analysis, and framework implementation
• Understanding of information security governance, risk, and compliance (GRC) principlesly
• Ability to translate complex security concepts into clear business-focused recommendations
• Strong stakeholder engagement and communication skills
• Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CISM, or CISSP are desirable

Why consider it

• Strong client exposure with real ownership of engagements
• Clear progression into senior advisory and leadership roles
• Opportunity to work on strategic security programmes, moving beyond traditional audit and compliance

#J-18808-Ljbffr…