Information Security Consultant – SMB
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Consultant delivering GRC advisory services for Cognisys, a cybersecurity consultancy. Strengthening client governance, risk management and compliance across recognised security frameworks.
Responsibilities:
- Lead and support GRC consulting engagements across multiple clients and sectors
- Contribute to security posture assessments, gap analyses and maturity reviews
- Assist in designing and implementing GRC programmes aligned with ISO 27001, SOC 2, NIST and related standards
- Support clients through audit preparation, certification processes and external assessments
- Develop remediation plans and track progress against agreed actions
- Participate in and lead client workshops, risk assessments and stakeholder sessions
- Build trusted client relationships and provide practical, business-focused security advice
- Manage multiple client engagements and ensure timely, high-quality delivery
- Help clients develop and implement governance, risk and compliance programmes
- Interpret security standards and regulatory requirements into practical recommendations
- Conduct information security risk assessments and maintain documentation
- Design and document security controls and operating models
- Develop governance documentation including policies, standards, procedures, risk registers, control frameworks and risk assessments
- Produce high-quality client deliverables and follow Cognisys methodologies and quality standards
- Identify improvements within client engagements and contribute to internal methodologies, templates and ways of working
Requirements:
- 2–5 years’ experience in security, risk, compliance or GRC-related roles
- Practical experience with at least one recognised security framework, such as ISO 27001, SOC 2 or NIST
- Experience supporting compliance, assurance or certification initiatives
- Strong written and verbal communication skills
- Excellent stakeholder management and relationship-building skills
- Strong organisational skills and ability to manage multiple priorities and engagements
- Analytical, pragmatic and solution-focused approach to problem solving
- Comfortable working with technical and non-technical stakeholders
- Strong attention to detail and commitment to high-quality client deliverables
- Previous consulting experience in a client-facing professional services environment preferred
- Experience delivering ISO 27001 implementation or certification projects desirable
- Exposure to SOC 2, NIST, PCI DSS, Cyber Essentials Plus or similar frameworks desirable
- Experience conducting information security risk assessments and governance reviews desirable
- Experience using GRC platforms such as Vanta or similar tools desirable
- Experience working with international clients or distributed teams desirable
- Certifications highly regarded: ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC, Security+ or equivalent security certifications
- Certifications are valued, but practical experience, problem-solving ability and development potential are also considered
Benefits:
- 22 days PTO per year
- 12 public and 8 special Filipino holidays
- 1 day of paid leave for your Birthday
- 13th Month Salary - 1/2 of monthly salary paid annually in December
- Individual healthcare insurance plan
- Access to an employee mental health and wellbeing platform
- £2,000 annual training budget
- Up to £2,000 per successful referral
Similar Jobs
Staff AI Security Engineer
Staff AI Security Engineer securing Addepar’s global investment data and AI platform. Leading AI security architecture, guardrails, governance, automation, and organization-wide security initiatives.
Security Engineer
Security Engineer securing AlertMedia’s risk intelligence and response SaaS platform. Improving AWS, application, compliance, monitoring, and customer security capabilities.
Staff Product Security Engineer
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy-now-pay-later platform. Designing secure, scalable CIAM backend systems and integrations.
Staff Product Security Engineer
Staff Product Security Engineer building CIAM backend services for Affirm’s buy-now-pay-later platform. Securing authentication, authorization, and account lifecycle flows at scale.
Application Security Consultant
Application Security Consultant advising inovex clients on secure architectures, SDLC, vulnerability management, and software supply-chain security. Developing trainings, reviewing applications, and advancing security consulting products.
Security Engineer
Palo Alto Networks Security Engineer optimizing NGFW security policies and Cortex XDR for Arctiq’s technology-services clients. Automating administration and troubleshooting complex network security issues.
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
Lead Security Engineer
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Staff Cloud Security Engineer
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.