Information Security Consultant

We are seeking an experienced Information Security IT Governance, Risk & Compliance (GRC) Lead to take ownership of our client's information security governance framework and drive the continued development of our ISO 27001-certified environment across multiple business entities. In this strategic position, you will work closely with senior stakeholders to strengthen risk management practices, ensure regulatory compliance, and support ongoing security improvements throughout the organization.

• Lead and coordinate the rollout, enhancement, and ongoing management of the Information Security Management System (ISMS).
• Oversee ISO 27001 compliance initiatives across various business units and group companies.
• Identify, assess, and monitor information security and IT-related risks, ensuring effective mitigation strategies are implemented.
• Design, review, and maintain security policies, procedures, controls, and governance documentation.
• Manage internal and external audits, certification activities, and compliance assessments.
• Establish and maintain governance structures, risk registers, reporting frameworks, and compliance metrics.
• Prepare and present risk, compliance, and project updates to executive leadership and senior management.

• At least 5 years of experience in Information Security, IT Governance, Risk Management, or Compliance.
• Demonstrated success in delivering ISO 27001 implementation, certification, or continuous improvement programs.
• ISO 27001 Lead Implementer, Lead Auditor, or comparable certification preferred.
• Strong project and program management capabilities with the ability to manage multiple initiatives simultaneously.