Senior Information Security Consultant – SMB

This is a fully remote position, open to applicants in South Africa.

📋 Description

• Lead and execute GRC consulting projects across various clients and sectors.

• Serve as the primary liaison for assigned clients, ensuring delivery excellence and client satisfaction.

• Design and implement GRC programs that align with frameworks such as ISO 27001, SOC 2, NIST, and other relevant standards.

• Conduct security posture assessments, gap analyses, and maturity evaluations.

• Create actionable remediation roadmaps and assist clients through the implementation process.

• Support clients in audit preparation, certification, and external evaluations.

• Confidently facilitate client workshops, risk assessments, and stakeholder meetings.

• Offer expert advice on security governance, risk management, and compliance strategies.

• Interpret standards and regulations, translating them into practical, business-oriented solutions.

• Advise clients on control design, operational models, and sustainable compliance practices.

• Assist in developing client security documentation, including policies, procedures, risk registers, control frameworks, and governance models.

• Help clients integrate compliance into their operational and technical processes rather than treating it as a one-time effort.

• Ensure the quality of client deliverables, maintaining accuracy, clarity, and consistency with internal standards.

• Review and provide constructive feedback on the work produced by junior consultants and analysts.

• Continuously enhance delivery playbooks, templates, and methodologies.

• Ensure that engagements are completed on time, within scope, and to a high professional standard.

• Mentor and support junior team members, fostering their technical and consulting growth.

• Provide guidance, coaching, and informal line management support as needed.

• Serve as a role model for consulting best practices and professional conduct.

• Contribute to cultivating a collaborative, high-performance team culture.

• Identify opportunities to enhance delivery efficiency, tools, and workflows.

• Contribute to the creation of a scalable and repeatable GRC consulting model.

• Assist with pre-sales activities as necessary, including project scoping, proposal input, and client discovery sessions.

• Help shape the strategic direction of the GRC practice through feedback and innovative ideas.

⛳️ Requirements

• Over 5 years of experience in security, risk, compliance, or GRC-related roles.

• Strong practical experience with one or more frameworks, such as ISO 27001, SOC 2, NIST, or similar.

• Demonstrated experience in delivering client-facing GRC or compliance engagements.

• Confidence in leading client meetings, workshops, and complex discussions.

• Ability to design security governance and compliance programs, not just implement them.

• Excellent written communication skills, with a track record of producing high-quality client documentation.

• Experience in mentoring or supporting the development of junior team members.

• Strong organizational skills with the capacity to manage multiple engagements and priorities.

• A pragmatic, solutions-oriented mindset with an understanding of business realities.

• Consulting experience is highly desirable.

🏝️ Benefits

• A dynamic and supportive work environment where customer care and innovation are at the forefront of our operations.

• A dedicated budget for your professional development.

• Access to an Employee Wellness Hub supported by Kara Connect, providing health and well-being resources.

• Regular team social events and celebrations.

• 25 days of leave, plus an additional holiday for your birthday.

• Refer-a-friend bonus program, offering up to £2,000!