Information Security Consultant

Digital Waffle; Birmingham; Teletrabalho; GBP 68 000 - 83 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Fully remote

Resumo da oferta

Digital Waffle is seeking an Information Security Consultant to join the GRC team remotely in the UK, with limited office travel (about twice monthly). You will lead ISMS activities, audit ISO 27001-based controls, and advise clients on governance, risk and compliance.

The role emphasises strong stakeholder engagement and cross-framework expertise. Ideal candidates will have hands-on ISO 27001 audits, exposure to NIST CSF and CAF, and experience with GDPR and data protection considerations, all

Qualificações

• Experience in Information Security GRC and ISO 27001 audits.
• Hands-on ISO 27001 implementation and auditing.
• Knowledge of NIST CSF and CAF frameworks.
• Familiarity with BMS aligned to ISO standards.
• Understanding of Cyber Essentials Plus, GDPR and DPA 2018.
• Experience with third‑party risk management and vendor reviews.
• Able to deliver security awareness training and present to stakeholders.
• Strong communication and ability to work independently and with teams.

Responsabilidades

• Support ISMS implementation and maintenance.
• Lead and contribute to ISO 27001, ISO 27701, ISO 9001, NIST CSF audits.
• Conduct internal audits and provide improvement recommendations.
• Assist clients with information security governance, risk and compliance.
• Manage third-party risk assessments and vendor security reviews.
• Deliver security awareness training and engage with stakeholders.
• Support sales with scoping client engagements and solutions.
• Contribute to business continuity and disaster recovery planning.
• Help develop the wider GRC service offering.

Conhecimentos

GRC governance

ISO 27001 auditing

NIST CSF

CAF (HMG)

Cyber Essentials Plus

GDPR

Data Protection Act 2018

Third-party risk

Vendor security assessments

Security awareness training

Stakeholder communication

Descrição da oferta de emprego

nformation Security Consultant Remote | Limited Office Travel (Twice a Month) | Up to £75,000

My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients.

You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance.

Key Responsibilities

• Support the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).
• Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.
• Conduct internal audits and provide recommendations for improvement.
• Support clients with information security governance, risk and compliance activities.
• Manage third-party risk assessments and vendor security reviews.
• Deliver security awareness training and engage with stakeholders at all levels.
• Support the sales team with scoping client engagements and developing solutions.
• Contribute to business continuity and disaster recovery planning.
• Help develop and strengthen the wider GRC service offering.

Skills & Experience

• Strong experience within Information Security Governance, Risk & Compliance (GRC).
• Hands-on experience implementing and auditing ISO 27001.
• Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.
• Experience working within a Business Management System (BMS) aligned to ISO standards.
• Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.
• Experience with third-party risk management and vendor security assessments.
• Confident delivering security awareness training and presenting to stakeholders.
• Strong communication skills with the ability to work independently and collaboratively.

What's on Offer?

• Salary up to £75,000.
• Fully remote working.
• Limited travel to the office, approximately twice per month.
• Opportunity to work across a varied client base and develop a growing GRC offering.
• A varied role with the opportunity to make a real impact within the business.