Information Security Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Responsibilities:
- Deliver GRC engagements against frameworks such as ISO 27001, SOC 2 and NIST
- Run gap analyses, security posture assessments and maturity reviews
- Design and implement security programmes, policies, procedures, risk registers and control frameworks
- Guide clients through audit preparation, certification and external assessments
- Build remediation plans and track client progress
- Provide ongoing security advisory, including vCISO-style support
- Assess security programmes and identify improvements to effectiveness and maturity
- Help clients prioritise security initiatives by risk, business objectives and available resources
- Assess risks, controls and operating practices and advise on realistic remediation
- Support specialist security projects and additional client work
- Lead client meetings, workshops and risk assessment sessions, usually by video call
- Translate security and compliance requirements for technical teams, operational staff and senior leadership
- Build trusted, long-term client relationships
- Own client engagements and workstreams from start to finish
- Manage competing priorities across multiple clients
- Produce clear, accurate deliverables to Cognisys standards
- Use GRC platforms such as Vanta and help shape and scope additional client work
- Share knowledge with the wider GRC team
Requirements:
- 2–5 years' experience in information security, cybersecurity, risk, compliance or GRC
- Consulting or other client-facing experience
- Practical experience with at least one framework, such as ISO 27001, SOC 2 or NIST
- Working understanding of security controls, risk management and security operations in practice
- Experience supporting compliance, assurance or security improvement work for external clients
- Confident written and verbal communication, including running sessions with clients
- Ability to manage several clients and priorities in a structured way
- Comfortable working with technical and non-technical stakeholders
- Experience taking organisations through certification or external audit
- vCISO, security advisory or ongoing security programme support experience
- Experience with GRC platforms such as Vanta, Drata or OneTrust
- Knowledge of regional frameworks, e.g. NIST SP 800-53/800-171, FedRAMP, CMMC, Cyber Essentials, CAF, POPIA or DPDP Act
- Certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISMP, CISA, CISM or CISSP
- Ability to work remotely in a self-managing and organised manner
Benefits:
- 23 days annual leave per year plus 10 Indian public holidays (5 national plus 5 state holidays of your choosing)
- 1 day of paid leave for your Birthday
- Individual healthcare insurance plan
- Access to an employee mental health and wellbeing platform
- £2,000 annual training budget
- Up to £2,000 per successful referral
Similar Jobs
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.