Consultant - Information Security

About the role

We are looking for an experienced Information Security Consultant to join our team and support clients across multiple industries. You will play a key role in assessing security risks, ensuring compliance with privacy regulations, and guiding business units on security matters.

Key responsibilities

• Conduct information security risk and impact assessments using frameworks such as NIST and ISO 27001.
• Review security and privacy clauses in contracts and support third‑party risk management.
• Assist with compliance certifications, client audits, and evidence collection.
• Support incident response, data breach investigations, and maintain risk assessment trackers.
• Drive security awareness initiatives and maintain sensitive information inventories.
• Perform due diligence on subcontractors and ensure contractual security obligations are met.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 5‑7 years of experience in information security or related roles.
• Strong written and verbal communication skills with the ability to summarize complex information.
• Excellent organizational skills and the ability to manage multiple priorities.

Required skills

• Knowledge of NIST and ISO 27001 security frameworks.
• Familiarity with privacy regulations such as HIPAA, HITECH, GDPR, POPIA, and PIPEDA.
• Experience with risk assessment methodologies and security incident handling.
• Preferred certifications: CISA, CISM, CISSP.