Information Governance Consultant (Lead Auditor

Contract: 30+ hours per week

Reports To: Chief Technology Officer

Role Summary

Are you an experienced Information Security and Compliance professional looking to deliver high-impact consultancy for the UK’s most trusted cyber security partner?

We are seeking a knowledgeable, client-focused Information Governance Consultant to join our core technical delivery team. In this client-facing role, you will act as a trusted strategic advisor to our external customers while serving as an internal Subject Matter Expert to support internal information governance and security matters as needed.

• Client Delivery Excellence: Consistent delivery of high-quality consultancy, ISO 27001 implementations, and external audit projects within agreed client timelines and Scope of Work SLAs.
• Audit & Assessment Integrity: Flawless execution of external client assessments and audits, maintaining rigorous compliance with IASME, DCC, and ISO standard requirements.
• Subject Matter Support: Providing effective, high-level subject matter expertise to support the business with internal compliance standards when required.
• Quality Thresholds & Client Satisfaction: Contribution to maintaining our 5.0
  * Trustpilot rating through clear, accurate report writing and actionable, client-first advice.
• Professional Standards: Successful achievement and maintenance of required assessor accreditations (IASME Cyber Assurance and Defence Cyber Certification).

1. Client Consulting & Audit Delivery

• Framework Implementation: Guide clients on best practices for designing, building, and embedding Information Security Management Systems (ISMS) tailored to their business needs.
• Auditing & Assessment: Conduct independent internal audits for clients against ISO 27001 standards and act as an official Assessor for IASME Cyber Assurance and Defence Cyber Certification (DCC).
• Data Protection & Governance: Provide expert advice and practical guidance on data protection compliance, risk assessments, and information governance controls.
• Technical Security Alignment: Bridge the gap between technical security controls and strategic governance to ensure holistic security postures for client organisations.

2. Expert Advisory & Knowledge Leadership

• Internal Subject Matter Expertise: Provide expert advice, guidance, and technical analysis in-house, supporting the Office Manager and wider business with subject matter expertise on internal compliance standards as required.
• Framework Expertise: Maintain deep, up-to-date knowledge of evolving standards, including ISO 27001, IASME Cyber Assurance, Defence Cyber Certification (DCC), and NCSC Cyber Assessment Framework (CAF).
• Team Awareness: Aid in increasing internal awareness of information governance, providing guidance and advice to team members across other business functions.
• Continuous Improvement: Keep abreast of emerging cyber threats, regulatory changes, and industry trends, continually improving skills in line with company objectives.

Required

• Experience: Minimum 3 years’ hands‑on experience in a compliance, audit, or information governance-focused role (consultancy or in‑house).
• Key Accreditation: Certified ISO 27001 Lead Auditor (substantial, verifiable auditing experience will be considered in lieu of certification).
• Framework Knowledge: Solid understanding of ISO 27001, IASME Cyber Assurance, Cyber Assessment Framework (CAF), and UK GDPR.
• Auditing & Reporting: Strong, accurate report writing skills with high attention to detail and the ability to articulate complex security concepts clearly.
• Stakeholder Management: Proven track record of managing internal and external stakeholders, building trust with C‑suite executives and technical teams alike.
• Personal Traits: Self‑motivated, capable of working independently or collaboratively, with a flexible mindset and an alignment with our core values.
• Qualified IASME Cyber Assurance Assessor and/or Defence Cyber Certification (DCC) Assessor (full training will be offered to achieve these qualifications if not already held).
• ISO 9001 Lead Auditor / Internal Auditor certification.
• Experience working within an NCSC‑aligned…