Remote GRC Consultant: ISO 27001 & Audits Expert

Digital Waffle; United States; Remote; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Remote work

Twice monthly office visits

Challenging client projects

Impactful GRC initiatives

Job summary

Digital Waffle is seeking an experienced Information Security Consultant to join its Governance, Risk & Compliance (GRC) team. You will work across information security frameworks, driving ISO 27001 implementations and audits while supporting internal security programmes and external clients.

You will lead audits, manage third-party risk, deliver security awareness training, and help grow the GRC service offering with a focus on ISO standards, GDPR and data protection.

Qualifications

• Strong experience in Information Security Governance, Risk & Compliance (GRC).
• Hands-on experience implementing and auditing ISO 27001.
• Knowledge of NIST CSF and HMG standards such as CAF.
• Experience with a Business Management System (BMS) aligned to ISO standards.

Responsibilities

• Support ISMS development, implementation and continual improvement.
• Lead and contribute to ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance audits.
• Conduct internal audits and provide improvement recommendations.
• Assist clients with information security governance, risk and compliance activities.
• Manage third-party risk assessments and vendor security reviews.
• Deliver security awareness training and present to stakeholders.
• Assist sales in scoping client engagements and developing solutions.
• Contribute to business continuity and disaster recovery planning.
• Help strengthen the wider GRC service offering.

Skills

GRC governance

ISO 27001

NIST CSF

IASME Governance

ISO 9001

GDPR compliance

Third-party risk

Security awareness training

Stakeholder engagement

Sales scoping

Job description

Digital Waffle is seeking an experienced Information Security Consultant to join its Governance, Risk & Compliance (GRC) team. You will work across information security frameworks, driving ISO 27001 implementations and audits while supporting internal security programmes and external clients.

You will lead audits, manage third-party risk, deliver security awareness training, and help grow the GRC service offering with a focus on ISO standards, GDPR and data protection.