Remote GRC & ISO 27001 Security Consultant

Digital Waffle; Birmingham; Remote; GBP 68.000 - 83.000; Vollzeit

Benefits dieser Stelle

Fully remote

Zusammenfassung

Digital Waffle is seeking an Information Security Consultant to join the GRC team remotely in the UK, with limited office travel (about twice monthly). You will lead ISMS activities, audit ISO 27001-based controls, and advise clients on governance, risk and compliance.

The role emphasises strong stakeholder engagement and cross-framework expertise. Ideal candidates will have hands-on ISO 27001 audits, exposure to NIST CSF and CAF, and experience with GDPR and data protection considerations, all

Qualifikationen

• Experience in Information Security GRC and ISO 27001 audits.
• Hands-on ISO 27001 implementation and auditing.
• Knowledge of NIST CSF and CAF frameworks.
• Familiarity with BMS aligned to ISO standards.
• Understanding of Cyber Essentials Plus, GDPR and DPA 2018.
• Experience with third‑party risk management and vendor reviews.
• Able to deliver security awareness training and present to stakeholders.
• Strong communication and ability to work independently and with teams.

Aufgaben

• Support ISMS implementation and maintenance.
• Lead and contribute to ISO 27001, ISO 27701, ISO 9001, NIST CSF audits.
• Conduct internal audits and provide improvement recommendations.
• Assist clients with information security governance, risk and compliance.
• Manage third-party risk assessments and vendor security reviews.
• Deliver security awareness training and engage with stakeholders.
• Support sales with scoping client engagements and solutions.
• Contribute to business continuity and disaster recovery planning.
• Help develop the wider GRC service offering.

Kenntnisse

GRC governance

ISO 27001 auditing

NIST CSF

CAF (HMG)

Cyber Essentials Plus

GDPR

Data Protection Act 2018

Third-party risk

Vendor security assessments

Security awareness training

Stakeholder communication

Jobbeschreibung

Digital Waffle is seeking an Information Security Consultant to join the GRC team remotely in the UK, with limited office travel (about twice monthly). You will lead ISMS activities, audit ISO 27001-based controls, and advise clients on governance, risk and compliance.

The role emphasises strong stakeholder engagement and cross-framework expertise. Ideal candidates will have hands-on ISO 27001 audits, exposure to NIST CSF and CAF, and experience with GDPR and data protection considerations, all