Information Security Consultant

About the role

The Information Security Consultant will help clients implement, assess, and manage information security frameworks such as ISO 27001:2022, ISO 27002, and SOC 2. Working independently or with senior consultants, you will guide organizations toward compliance and best‑practice security governance.

Key responsibilities

• Assist clients in achieving ISO 27001/27002 certification by identifying and implementing required controls.
• Conduct SOC 2 assessments, map Trust Service Criteria, and support compliance implementation.
• Perform risk assessments, provide mitigation recommendations, and track risk closure.
• Develop, review, and maintain security policies, procedures, guidelines, and templates.
• Create and review baseline standards for operating systems, databases, web servers, and applications.
• Support post‑implementation audits to ensure ongoing ISO 27001 compliance.
• Design and deliver information security awareness programs and training.
• Provide virtual CISO (vCISO) advisory services on strategy and governance.

Required profile

• Strong background in Information Technology or Cybersecurity.
• Experience conducting audits, risk analyses, and policy development.
• Ability to work autonomously and collaborate with client stakeholders.

Required skills

• Auditing
• Policy development
• Database security
• Firewall design
• Risk analysis
• Identity management
• Access control
• Web security
• ISO 27001
• ISO 27002
• SOC 2
• HIPAA
• NIST
• CIS
• PCI DSS