Information Security Consultant

This is a fully remote position, open to applicants in South Africa.

📋 Description

• Oversee the execution of GRC consulting projects across a diverse range of clients and industries.

• Engage in security posture evaluations, gap assessments, and maturity reviews.

• Aid in the creation and implementation of GRC programs that are in alignment with ISO 27001, SOC 2, NIST, and other relevant standards.

• Support clients during audit preparations, certification journeys, and external evaluations.

• Formulate remediation strategies and help clients monitor their progress on agreed actions.

• Facilitate and lead client workshops, risk evaluations, and stakeholder meetings.

• Analyze security standards and regulations, converting requirements into actionable recommendations.

• Create policies, procedures, risk registers, control frameworks, and governance documents.

• Contribute to the design and documentation of security controls and operational models.

• Integrate compliance activities into operational and technical workflows.

• Perform risk assessments and maintain the necessary documentation.

• Deliver high-quality outputs for clients.

• Adhere to established methodologies, templates, and internal quality benchmarks.

• Recognize opportunities for improvement within projects.

• Manage assigned responsibilities to fulfill deadlines and scope expectations.

⛳️ Requirements

• 3–5 years of experience in security, risk, compliance, or roles related to GRC.

• Hands-on experience with at least one framework such as ISO 27001, SOC 2, NIST, or similar standards.

• Background in supporting compliance or assurance initiatives, whether internal or client-facing.

• Excellent written and verbal communication abilities.

• Capability to handle multiple priorities in a structured and organized fashion.

• Analytical mindset with a practical approach to solving problems.

• Comfortable collaborating with both technical and non-technical stakeholders.

• Consulting experience is highly advantageous but not mandatory.

• Familiarity with GRC platforms, including Vanta, is a plus.

🏝️ Benefits

• 25 days of annual leave per year in addition to 12 public holidays in South Africa.

• 1 day of paid leave to celebrate your Birthday.

• Individual healthcare insurance coverage.

• Access to an employee mental health and wellbeing platform.

• Annual training budget of £2,000.

• Up to £2,000 for each successful referral.