Information Security Consultant

An exciting opportunity join this growing specialist provider of IT solutions and services. You will be joining a small and skilled Compliance Team, you must have experience f working as a ISO 27001 implementer and auditor and NIST. You will be assisting in supporting the operation, maintenance and maturity of the Information Security program internal and external clients

Duties and responsibilities will include:

• Ensuring the protection of information assets and technologies
• Contribution to completion of security related audits such as ISO27001, ISO27701, ISO20000, NIST-CSF, IASME Governance
• Conduct and document internal audits
• Hands-on experience in implementing and auditing ISO27001 is required
• Experience delivering security awareness training or and be comfortable with public speaking
• The ability to develop and leverage strong relationships with internal and external stakeholders.
• Manage Third Party Risk Management (TPRM) including vendor security programme reviews,
• Help the Sales Team with scoping engagements and delivering a valued service to our customers

You will need:

• Extensive Information Security Governance, Risk and Compliance (GRC) experience as well as InfoSec Operations experience
• Experience contributing to an Information Security Management System (ISMS) certified to ISO27001 standards
• Good knowledge of the Cyber Essentials Plus Scheme as well as UK & EU General Data Protection Regulation (GDPR) and the Data Protection Act (2018)
• The ability to work autonomously and as part of a team, excellent communication skills

Desired Certifications:

• ISO/IEC 27001 Lead Implementer
• ISO/IEC 27001 Internal Auditor
• CISM/CISSP: