Information Security Consultant (Remote, US Hours)

About the role

Our GRC Consulting practice is looking for an Information Security Consultant to join a remote team serving South African clients while working US business hours. You will help organisations improve their security posture and achieve compliance through practical, business‑aligned guidance.

Key responsibilities

• Lead delivery of GRC consulting engagements across multiple industries.
• Conduct security posture assessments, gap analyses, and maturity reviews.
• Design and implement GRC programmes aligned to ISO 27001, SOC 2, NIST and related standards.
• Support clients through audit preparation, certification processes and external assessments.
• Develop remediation plans and track progress against agreed actions.
• Facilitate client workshops, risk assessments and stakeholder sessions.
• Produce high‑quality deliverables following internal methodologies and quality standards.

Required profile

• 2–5 years of experience in security, risk, compliance or GRC roles.
• Practical experience with at least one framework such as ISO 27001, SOC 2 or NIST.
• Experience supporting compliance or assurance initiatives, either internal or client‑facing.
• Ability to work remotely on South African soil while covering US working hours (3 pm‑10 pm).

Required skills

• ISO 27001
• SOC 2
• NIST
• GRC (Governance, Risk & Compliance) methodology

What we offer

• Salary range R450 000 – R650 000 per annum.
• Additional 15 % allowance for non‑standard working hours.
• Fully remote work arrangement.