Information Security Consultant - ISMS

About the role

This consultant role centres on developing and maintaining an Information Security Management System (ISMS) for an organisation, covering risk assessment, security controls, compliance and security awareness. The position sits within the broader information security function.

Key responsibilities

• Develop and implement an ISMS framework based on standards such as ISO 27001.
• Conduct risk and vulnerability assessments to identify security threats and weaknesses.
• Design and implement security controls and measures protecting information assets.
• Establish security policies, procedures and guidelines for regulatory and best-practice compliance.
• Monitor and assess security incidents, investigate breaches and recommend remediation.
• Deliver security awareness training and education programmes for employees.
• Work with cross-functional teams to embed security controls in business processes and technology solutions.
• Take part in audits and compliance assessments and maintain ISMS documentation and reports.
• Advise internal stakeholders on security matters and stay up to date with emerging threats and trends.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Security or a related field.
• Experience implementing and managing an ISMS under ISO 27001 or similar frameworks.
• Professional certifications such as CISSP, CISM or CISA are highly desirable.
• Excellent communication and interpersonal skills, analytical mindset and attention to detail.

Required skills

• Strong knowledge of information security principles, best practices and regulatory requirements.
• Risk assessment, vulnerability assessment and incident response.
• Familiarity with firewalls, intrusion detection/prevention systems, antivirus software and encryption.