Information Security Consultant - Risk Management

Placements24; Stellenbosch; Hybrid; ZAR 1,240,000 - 2,066,000; Part time

Benefits offered by this job

Contract-based rate

Job summary

Placements24 is seeking an experienced Information Security Consultant specializing in Risk Management. This remote-first role focuses on helping diverse clients identify, assess and mitigate information security risks.

You will develop risk management frameworks, conduct security assessments and provide strategic guidance to clients. The ideal candidate has 5+ years of information security experience, strong analytical skills, and deep knowledge of risk assessment methodologies, with excellent

Qualifications

• Bachelor's or master's degree in Information Security, Computer Science, or a related field.
• Professional certifications such as CRISC, CISM, CISSP, or CGEIT are highly desirable.
• Minimum of 5 years of experience in information security with a focus on risk management and consulting.

Responsibilities

• Conduct detailed information security risk assessments for clients across various industries.
• Develop and implement customized risk management frameworks and strategies.
• Identify and analyze potential threats, vulnerabilities, and their potential impact.
• Recommend appropriate security controls and mitigation strategies to reduce risk.
• Assist clients in developing and refining their information security policies and procedures.
• Provide expert advice on compliance with relevant regulations (e.g., POPIA, GDPR, ISO 27001).
• Prepare and present comprehensive risk assessment reports and findings to client stakeholders.
• Collaborate with client IT teams to implement security recommendations.
• Stay updated on latest cybersecurity threats, trends, and risk management best practices.
• Support business development activities by contributing to proposals and client engagements.

Skills

Risk assessment

Risk management

Client-facing

Analytical thinking

Project management

Education

Bachelor's or Master's degree in Information Security/CS

CRISC, CISM, CISSP, CGEIT certifications

Tools

NIST RMF

FAIR

ISO 27001

SOC 2

POPIA

Job description

About the Role

Our client, a fast-growing technology consultancy, is seeking an experienced Information Security Consultant specializing in Risk Management. This remote-first position offers the opportunity to work with a diverse range of clients, helping them identify, assess, and mitigate information security risks. You will be responsible for developing comprehensive risk management frameworks, conducting security assessments, and providing strategic advice to clients. The ideal candidate will possess strong analytical skills, deep knowledge of risk assessment methodologies, and excellent client-facing abilities. This role is perfect for a self-motivated professional looking for challenging projects and flexibility.

Key Responsibilities

• Conduct detailed information security risk assessments for clients across various industries.
• Develop and implement customized risk management frameworks and strategies.
• Identify and analyze potential threats, vulnerabilities, and their potential impact.
• Recommend appropriate security controls and mitigation strategies to reduce risk.
• Assist clients in developing and refining their information security policies and procedures.
• Provide expert advice on compliance with relevant regulations (e.g., POPIA, GDPR, ISO 27001).
• Prepare and present comprehensive risk assessment reports and findings to client stakeholders.
• Collaborate with client IT teams to implement security recommendations.
• Stay updated on the latest cybersecurity threats, trends, and risk management best practices.
• Support business development activities by contributing to proposals and client engagements.

Requirements

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.
• Professional certifications such as CRISC, CISM, CISSP, or CGEIT are highly desirable.
• Minimum of 5 years of experience in information security, with a significant focus on risk management and security consulting.
• Proven experience in conducting comprehensive risk assessments and developing risk treatment plans.
• In-depth knowledge of various risk assessment methodologies (e.g., NIST RMF, FAIR).
• Strong understanding of cybersecurity principles, threats, and vulnerabilities.
• Familiarity with international security standards and compliance frameworks (ISO 27001, SOC 2, GDPR, POPIA).
• Excellent analytical, problem-solving, and critical thinking skills.
• Exceptional communication, presentation, and interpersonal skills, with the ability to build rapport with clients.
• Proven ability to manage multiple projects independently and deliver high-quality results.
• Experience with security governance and compliance frameworks.

Benefits

• Our client offers a highly competitive contract rate commensurate with experience and expertise.
• As a contractor, you will enjoy the flexibility of remote work and the opportunity to choose projects that align with your interests.
• Our client values professional development and may offer support for relevant training and certifications.
• This role offers the chance to work with a dynamic and supportive team on diverse and impactful projects for a range of clients.
• You will gain exposure to various industries and cutting-edge security challenges, enhancing your professional portfolio.