Information Security Consultant

About the role

The Information Security Consultant will help clients achieve and maintain compliance with major security frameworks such as ISO 27001, ISO 27002, and SOC 2. Working independently or alongside senior consultants, you will provide strategic guidance, conduct assessments, and deliver vCISO support.

Key responsibilities

• Assist clients in attaining ISO 27001 certification and verify ongoing compliance with ISO 27001/27002 controls.
• Guide clients through SOC 2 compliance, including Trust Service Criteria implementation and assessments.
• Perform risk assessments, develop mitigation plans, and track risk closure.
• Create, review, and maintain information security policies, procedures, and baseline standards for operating systems, databases, web servers, and applications.
• Conduct post‑implementation audits and gap assessments to ensure continuous compliance.
• Design and deliver information security awareness programs and training sessions.
• Develop incident response plans and support clients during security incidents.
• Provide virtual Chief Information Security Officer (vCISO) services, advising on strategy and governance.

Required profile

• Strong background in Information Technology or Cybersecurity.
• Experience with auditing, policy development, and risk analysis.
• Ability to work autonomously and collaborate with client stakeholders.

Required skills

• ISO 27001 and ISO 27002 standards
• SOC 2 Trust Service Criteria
• Risk assessment and mitigation
• Policy and procedure development
• Auditing and compliance verification
• Database security
• Firewall design
• Identity management and access control
• Web security
• Knowledge of HIPAA, NIST, CIS, PCI DSS frameworks