Information Security Consultant

About the role

We are looking for an experienced Information Security Consultant to join our global team. You will support clients in assessing and managing information security and privacy risks, ensuring compliance with relevant regulations and standards.

Key responsibilities

• Conduct information security risk and impact assessments based on NIST, ISO 27001 and privacy principles.
• Review security and privacy clauses in contracts and support third‑party risk management.
• Assist with compliance certifications, client audits, and evidence collection.
• Support business and risk leaders on security matters and contribute to incident response and data‑breach investigations.
• Maintain risk assessment trackers, sensitive information inventories, and drive security awareness initiatives.

Required profile

• Bachelor’s degree in Information Technology, Computer Science or a related field.
• 5‑7 years of experience in information security, risk assessment, and privacy compliance.
• Strong written and verbal communication skills with the ability to summarize complex information.
• Preferred certifications: CISA, CISM, CISSP.

Required skills

• Knowledge of NIST and ISO 27001 frameworks.
• Familiarity with privacy regulations such as HIPAA, HITECH, GDPR, POPIA and PIPEDA.
• Experience with security risk assessment, third‑party risk management and incident handling.