Note: The job is a remote job and is open to candidates in USA. Ideagen is hiring an Information Security Consultant to help client organisations strengthen information security, governance, risk, and compliance capabilities. The role supports clients pursuing and maintaining certifications such as ISO 27001 through audits, risk assessments, framework reviews, and practical recommendations.
Responsibilities
- Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments
- Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement
- Assess clients' existing governance, risk, and security frameworks against industry standards and best practices
- Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients
- Support organisations in implementing and improving information security controls and compliance processes
- Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership
- Conduct information security risk assessments and support the development of effective risk treatment plans
- Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements
Skills
- Recognised ISO certification
- Experience supporting organisations in regulated industries
- ISO 27001 Internal Auditor certification
- You have experience working within information security, compliance, governance, risk, audit, or a related discipline
- You possess a good understanding of ISO 27001 and information security management system principles
- You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards
- You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way
- You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions
- You are self-motivated, proactive, and comfortable taking ownership of your work and development
- Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous
- Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS
- Experience working with clients in regulated industries
- Knowledge of information security controls, cloud technologies, risk management, or security governance practices
Benefits
- Remote work
- Flexible arrangements are welcomed; candidates interested should mention this during the application process.
Company Overview
Company H1B Sponsorship