Information Security Consultant

Damstra Technology Pty; San Francisco (CA); Remote; USD 110,000 - 160,000; Full time

Job summary

Ideagen is seeking an Information Security Consultant to strengthen clients' information security, governance, and compliance capabilities. You will guide organisations toward certifications like ISO 27001, build effective governance, risk, and compliance frameworks, and deliver practical security improvements across diverse engagements.

You will engage with stakeholders at all levels, from operational teams to executives, and grow into a broader trusted advisor through curious, proactive

Qualifications

• Experience in information security, compliance, governance, risk, audit or related discipline.
• Strong understanding of ISO 27001 and information security management system principles.
• Experience auditing, reviewing evidence, or assessing controls against recognised frameworks or standards.
• Excellent communication with stakeholders and ability to present complex information clearly.
• Enjoy solving problems, analysing requirements and recommending pragmatic solutions.
• Self-motivated and proactive with ownership mindset.
• Keen to grow expertise across information security, governance, risk and compliance consultancy.

Responsibilities

• Conduct internal audits against ISO 27001 and other recognised standards for client certifications.
• Review policies, procedures, controls and evidence to identify gaps and improvements.
• Assess governance, risk and security frameworks against industry standards and best practices.
• Produce audit reports, findings, recommendations and action plans with practical value.
• Support organisations in implementing and improving information security controls and compliance processes.
• Facilitate workshops, interviews and discussions with stakeholders from staff to executives.
• Conduct information security risk assessments and assist in risk treatment planning.
• Build trusted client relationships and deliver high‑quality consulting across engagements.

Skills

Information security

Compliance

Governance

Audit

Risk management

Stakeholder communication

Problem solving

Self-motivated

Tools

Vanta

Drata

Strike Graph

Job description

Information Security Consultant

Job ID 2026-3189

# of Openings 1

Location US-

Role type Permanent

Working Remote

Name US Homebased

Role Purpose

Location- USA

Level - Consultant (Full time position)

Department - Customer

Benefits - Benefits at Ideagen

Salary - To be discussed at next stage

We're looking for a Compliance Consultant / Information Security Consultant to help organisations strengthen their information security, governance, and compliance capabilities. Working with a diverse client base, you'll support businesses on their journey towards achieving and maintaining certifications such as ISO 27001, while also helping them build effective security frameworks, governance processes, and risk management practices.

This is a varied consulting role where no two client engagements are the same. You may be supporting a client through an internal audit ahead of a certification assessment, identifying gaps between their current controls and industry standards, or providing practical guidance on implementing governance, risk, and compliance best practices. You'll work closely with organisations of different sizes and levels of maturity, helping them improve their security posture and navigate evolving compliance requirements.

We're particularly interested in someone who is eager to grow, enjoys solving problems, and can build trusted relationships with clients. While experience in information security and compliance is important, we're equally looking for someone with the curiosity, initiative, and drive to develop into a broader trusted advisor over time.

Responsibilities

• Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
• Review policies, procedures, controls and supporting evidence to identify compliance gaps and areas for improvement.
• Assess clients’ existing governance, risk, and security frameworks against industry standards and best practices.
• Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
• Support organisations in implementing and improving information security controls and compliance processes.
• Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
• Conduct information security risk assessments and support the development of effective risk treatment plans.
• Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.

Skills and Experience

• You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
• You possess a good understanding of ISO 27001 and information security management system principles.
• You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
• You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
• You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
• You are self-motivated, proactive, and comfortable taking ownership of your work and development.
• You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.
• Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.

Nice to have:

• ISO 27001 Internal Auditor certification.
• Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
• Experience working with clients in regulated industries.
• Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

About Ideagen

Ideagen is the invisible force behind many things we rely on every day - from keeping airplanes soaring in the sky, to ensuring the food on our tables is safe, to helping doctors and nurses care for the sick. So, when you think of Ideagen, think of it as the silent teammate that's always working behind the scenes to help those people who make our lives safer and better. Everyday, millions of people are kept safe using Ideagen software. We have offices all over the world including America, Australia, Malaysia and India with people doing lots of different and exciting jobs.

We’re building a future-ready team, and AI is part of how we work smarter. If you're curious, adaptable and open to using AI to improve how you work, you’ll thrive at Ideagen!