Information Security Consultant – SMB

🔥 2 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cognisys

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔒 Cybersecurity

📋 Compliance

💼 Consulting

💰 Debt financing on 2023-04

Cybersecurity • Compliance • Consulting

Cognisys is a cybersecurity and compliance consultancy that provides governance, risk and compliance (GRC) services, CREST-accredited penetration testing, and vulnerability management. They act as a security and compliance partner (including vCISO engagements), and are a leading global service partner for Vanta, helping clients accelerate compliance like SOC 2 and ISO 27001. Cognisys operates internationally with multiple regional teams and offices, offers remote and hybrid roles, and emphasizes agile, client-focused delivery for organisations ranging from startups to large enterprises.

📋 Description

• Lead the delivery of GRC consulting engagements across multiple clients and sectors • Contribute to security posture assessments, gap analyses, and maturity reviews • Assist in the design and implementation of GRC programmes aligned to frameworks such as ISO 27001, SOC 2, NIST, and related standards • Support clients through audit preparation, certification processes, and external assessments • Develop remediation plans and assist clients in tracking progress against agreed actions • Participate and lead in client workshops, risk assessments, and stakeholder sessions • Support the interpretation of security standards and regulations, translating requirements into practical recommendations • Lead in the development of policies, procedures, risk registers, control frameworks, and governance documentation • Contribute to the design and documentation of security controls and operating models • Help embed compliance activities into operational and technical processes • Conduct risk assessments and maintain supporting documentation • Produce high-quality client deliverables with clarity, accuracy, and consistency • Follow established methodologies, templates, and internal quality standards • Proactively identify areas for improvement within engagements • Manage assigned tasks effectively to meet deadlines and scope expectations

🎯 Requirements

• 2–5 years’ experience in security, risk, compliance, or GRC-related roles • Practical experience with at least one framework such as ISO 27001, SOC 2, NIST, or similar standards • Experience supporting compliance or assurance initiatives (internal or client-facing) • Strong written and verbal communication skills • Ability to manage multiple priorities in a structured and organised manner • Analytical mindset with a pragmatic approach to problem solving • Comfortable working with both technical and non-technical stakeholders • Consulting experience is highly desirable but not essential • Experience with GRC platforms including Vanta is desirable

🏖️ Benefits

• 25 days annual leave plus 12 South African public holidays • 1 day of paid leave for your Birthday • Individual healthcare insurance plan • Access to an employee mental health and wellbeing platform • £2,000 annual training budget