Digital Waffle
Information Security Consultant
Information Security Consultant at Digital Waffle, based in Birmingham, West Midlands. This is a permanent role.
- Pay
- Not given by the employer
- Hours and contract
- Permanent · On site
- Location
- Birmingham, West Midlands
- Closing date
- Sector
- IT & Software
Reference 31243fb03d1ca0130aaa501dca21f631c87a44c3
About the role
nformation Security Consultant Remote | Limited Office Travel (Twice a Month) | Up to £75,000My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team. This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients. You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance.Key ResponsibilitiesSupport the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.Conduct internal audits and provide recommendations for improvement.Support clients with information security governance, risk and compliance activities.Manage third-party risk assessments and vendor security reviews.Deliver security awareness training and engage with stakeholders at all levels.Support the sales team with scoping client engagements and developing solutions.Contribute to business continuity and disaster recovery planning.Help develop and strengthen the wider GRC service offering. Skills & ExperienceStrong experience within Information Security Governance, Risk & Compliance (GRC).Hands-on experience implementing and auditing ISO 27001.Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.Experience working within a Business Management System (BMS) aligned to ISO standards.Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.Experience with third-party risk management and vendor security assessments.Confident delivering security awareness training and presenting to stakeholders.Strong communication skills with the ability to work independently and collaboratively. What's on Offer?Salary up to £75,000.Fully remote working.Limited travel to the office, approximately twice per month.Opportunity to work across a varied client base and develop a growing GRC offering.A varied role with the opportunity to make a real impact within the business.
Reference: 31243fb03d1ca0130aaa501dca21f631c87a44c3 · Posted 4 days ago · Closes 13 Nov 2026 · Listed via Digital Waffle
Apply for this job
This role is listed via Digital Waffle. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Signed in? Every job you apply for counts toward your weekly goal and badges. How it works
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.