Information Security Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Consultant delivering GRC assessments, frameworks, and compliance advisory for Cognisys clients. Translating security requirements into practical improvements across diverse industries.
Responsibilities:
- Lead the delivery of GRC consulting engagements across multiple clients and sectors
- Contribute to security posture assessments, gap analyses, and maturity reviews
- Assist in designing and implementing GRC programmes aligned to ISO 27001, SOC 2, NIST, and related standards
- Support clients through audit preparation, certification processes, and external assessments
- Develop remediation plans and assist clients in tracking progress against agreed actions
- Participate in and lead client workshops, risk assessments, and stakeholder sessions
- Interpret security standards and regulations and translate requirements into practical recommendations
- Develop policies, procedures, risk registers, control frameworks, and governance documentation
- Contribute to the design and documentation of security controls and operating models
- Help embed compliance activities into operational and technical processes
- Conduct risk assessments and maintain supporting documentation
- Produce high-quality client deliverables
- Follow established methodologies, templates, and internal quality standards
- Identify engagement improvements and manage assigned tasks to meet deadlines and scope expectations
Requirements:
- 2–5 years’ experience in security, risk, compliance, or GRC-related roles
- Practical experience with at least one framework such as ISO 27001, SOC 2, NIST, or similar standards
- Experience supporting compliance or assurance initiatives (internal or client-facing)
- Strong written and verbal communication skills
- Ability to manage multiple priorities in a structured and organised manner
- Analytical mindset with a pragmatic approach to problem solving
- Comfortable working with both technical and non-technical stakeholders
- Consulting experience is highly desirable but not essential
- Experience with GRC platforms including Vanta is desirable
Benefits:
- 25 days annual leave per year plus 12 South African public holidays
- 1 day of paid leave for your Birthday
- Individual healthcare insurance plan
- Access to an employee mental health and wellbeing platform
- £2,000 annual training budget
- Up to £2,000 per successful referral
Similar Jobs
Senior Specialist, Microsoft Cloud & Security
Especialista sênior projetando e sustentando ambientes Microsoft 365, Azure e identidade híbrida. Protegendo dados, resolvendo incidentes críticos e conduzindo projetos corporativos.
Information Security Access Specialist
Information Security Access Specialist securing employee access for GR8_TECH’s B2B iGaming platforms. Automating IAM workflows, RBAC governance, and AI-assisted access operations.
Application Security Consultant
Application Security Consultant assessing customer applications for vulnerabilities at DirectDefense, a cybersecurity services provider. Conducting dynamic testing, static code reviews, and remediation guidance.
DevSecOps Engineer, Security Compliance
DevSecOps Engineer securing SAP delivery for federal clients. Automating deployments, vulnerability checks, controls, and authorization evidence.
Regional Security Manager
Regional Security Manager protecting Saab’s defence and security operations across Southern Africa. Coordinating personnel, risk, compliance, crisis response and regional security strategy.
Principal Security Architect
Principal Security Architect owning cloud and application security for Lilly’s AWS-heavy strategic programs. Protecting trade secrets through architecture reviews, threat modeling, and risk governance.
Senior Security Architect
Senior Security Architect designing scalable cybersecurity solutions for Humana’s healthcare insurance and CenterWell services. Supporting cloud, application, risk, compliance, automation, and acquisition integration initiatives.
Managing Engineer – Data Security Engineering
Managing Engineer leading Allstate’s data security engineering team. Building automated DLP, data intelligence, and data access controls for insurance operations.
SAP Security Consultant – AMS
SAP Security Consultant administering roles, authorizations, and access governance for DyFlex clients. Supporting audits, SoD analysis, GRC, upgrades, and managed SAP environments.
Senior Security Engineer, Customer Transparency
Senior Security Engineer improving customer transparency for Tanium’s AI-powered endpoint management and security platform. Managing vulnerability disclosure, SBOM visibility, bug bounty operations, and security advisories.
Técnico/a de Seguridad, PAM – CyberArk
Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.
Domain Lead – Transformation, Cybersecurity Strategy Adoption
Cybersecurity transformation lead embedding policies, change management, and security adoption across SNCB/NMBS. Driving workforce engagement and governance for Belgium’s national railway.
Senior IT Systems, Security Engineer
Senior engineer implementing secure identity, endpoint, cloud, and network systems for Defense Unicorns’ federal and enterprise customers. Supporting compliance-ready software delivery and cybersecurity operations.
IT Systems, Security Engineer
IT Systems & Security Engineer implementing and securing customer IT environments for Defense Unicorns. Configuring identity, endpoints, networks, compliance controls, and automation.
Senior Security Engineer
Senior Security Engineer securing Redox’s cloud-native healthcare data interoperability platform. Hardening Kubernetes, containers, infrastructure, and application security across U.S.-based remote engineering teams.
Mid-Level Information System Security Officer, ISSO
ISSO owning cybersecurity posture and RMF compliance for systems supporting a large federal agency. Leading assessments, continuous monitoring, POA&M remediation, and authorization readiness.
Cyber Security Engineer
Cyber Security Engineer protecting HBK’s global enterprise IT environment. Securing cloud, network, endpoint, identity, and AI systems for a global test and measurement leader.
Senior Information Systems Security Engineer
Senior ISSE authorizing Navy cybersecurity systems for Leidos' enterprise IT program. Managing RMF, ATO packages, STIGs, vulnerability compliance, and DoD security documentation.
Security Engineer
Security Engineer leading advanced penetration testing and agentic AI workflows for Cisco’s cloud and on-premises products. Identifying vulnerabilities and guiding remediation to strengthen global customer security.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing complex client Azure environments. Leading cloud security architecture, incident response, IAM, compliance, and automation initiatives.