Information Security Consultant

This is a fully remote position, open to applicants in South Africa.

📋 Description

• Oversee the execution of GRC consulting projects across various clients and industries.

• Contribute to evaluations of security posture, gap analyses, and maturity assessments.

• Aid in the design and implementation of GRC programs that align with ISO 27001, SOC 2, NIST, and similar standards.

• Assist clients in preparing for audits, certification procedures, and external evaluations.

• Create remediation strategies and help clients monitor progress against established actions.

• Engage in and facilitate client workshops, risk assessments, and stakeholder meetings.

• Analyze security standards and regulations, translating requirements into actionable recommendations.

• Develop policies, procedures, risk registers, control frameworks, and governance documentation.

• Support the design and documentation of security controls and operational models.

• Aid in incorporating compliance activities into operational and technical workflows.

• Perform risk assessments and maintain necessary supporting documentation.

• Produce high-quality deliverables for clients.

• Adhere to established methodologies, templates, and internal quality standards.

• Identify areas for improvement in engagements and manage assigned tasks to meet deadlines and scope requirements.

⛳️ Requirements

• 2–5 years of experience in security, risk, compliance, or GRC-related positions.

• Hands-on experience with at least one framework such as ISO 27001, SOC 2, NIST, or comparable standards.

• Experience in supporting compliance or assurance initiatives, whether internal or client-facing.

• Excellent written and verbal communication abilities.

• Capability to manage multiple priorities in a well-structured and organized way.

• Analytical mindset with a practical approach to problem-solving.

• Comfortable collaborating with both technical and non-technical stakeholders.

• Consulting experience is highly preferred but not mandatory.

• Familiarity with GRC platforms, including Vanta, is a plus.

🏝️ Benefits

• 25 days of annual leave each year, in addition to 12 South African public holidays.

• One day of paid leave for your birthday.

• Individual healthcare insurance coverage.

• Access to an employee mental health and wellbeing platform.

• £2,000 annual training budget.

• Up to £2,000 for successful referrals.