Digital Waffle
Information Security Consultant
Information Security Consultant at Digital Waffle, based in Birmingham, West Midlands, paying £60,000 - £75,000 per annum. This is a permanent role.
- Pay
- £60,000 - £75,000 per annum
- Hours and contract
- Permanent · On site
- Location
- Birmingham, West Midlands
- Closing date
- Sector
- IT & Software
About 20% above the going rate for it & software
Reference 1123_1794234561
About the role
Information Security Consultant
Remote | Limited Office Travel (Twice a Month) | Up to £75,000
My client is looking for an experienced Information Security Consultant to join their growing Governance, Risk & Compliance (GRC) team.
This is an excellent opportunity for someone with a strong background in information security, particularly ISO 27001 implementation and auditing, to play a key role in developing the GRC service offering while supporting both internal security programmes and external clients.
You will work across a range of information security frameworks and standards, helping organisations strengthen their security posture, manage risk and maintain compliance.
Key Responsibilities
- Support the implementation, maintenance and continuous improvement of Information Security Management Systems (ISMS).
- Lead and contribute to audits against ISO 27001, ISO 27701, ISO 9001, NIST CSF and IASME Governance.
- Conduct internal audits and provide recommendations for improvement.
- Support clients with information security governance, risk and compliance activities.
- Manage third-party risk assessments and vendor security reviews.
- Deliver security awareness training and engage with stakeholders at all levels.
- Support the sales team with scoping client engagements and developing solutions.
- Contribute to business continuity and disaster recovery planning.
- Help develop and strengthen the wider GRC service offering.
Skills & Experience
- Strong experience within Information Security Governance, Risk & Compliance (GRC).
- Hands-on experience implementing and auditing ISO 27001.
- Knowledge of other frameworks, including NIST CSF and HMG standards such as CAF.
- Experience working within a Business Management System (BMS) aligned to ISO standards.
- Good understanding of Cyber Essentials Plus, GDPR and the Data Protection Act 2018.
- Experience with third-party risk management and vendor security assessments.
- Confident delivering security awareness training and presenting to stakeholders.
- Strong communication skills with the ability to work independently and collaboratively.
What's on Offer?
- Salary up to £75,000.
- Fully remote working.
- Limited travel to the office, approximately twice per month.
- Opportunity to work across a varied client base and develop a growing GRC offering.
- A varied role with the opportunity to make a real impact within the business.
Reference: 1123_1794234561 · Posted 24 minutes ago · Closes 16 Nov 2026 · Listed via Digital Waffle
Apply for this job
This role is listed via Digital Waffle. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Signed in? Every job you apply for counts toward your weekly goal and badges. How it works
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.