information security consultant

Confidential Company

Conduct periodic security audits &amp; assessments (internal &amp; external)<ul><li>Review security policies, procedures, standards, and controls</li><li>Assess and validate existing technical and operational security controls</li><li>Risk assessments: identify, evaluate, and prioritize security risks</li><li>Assess maturity of security controls, identify gaps vs frameworks (ISO 27001, NIST, CIS, etc.)</li><li>Review incident response readiness, playbooks, and past incident analyses</li><li>Monitor SOC / threat detection / alerting processes (if applicable) and understand SIEM, IDS/IPS, incident response, threat hunting</li><li>Provide gap analysis against standards (e.g. ISO 27001, NIST CSF, SOC 2)</li><li>Prepare audit findings reports, articulate recommendations and roadmap</li><li>Conduct vendor / third-party security reviews</li><li>Produce findings reports, guide remediation, and follow up to closure</li><li>Review network, endpoint, identity, access, encryption controls, etc</li><li>Mentor internal security staff (if any)</li><li>Stay updated with evolving threats, regulatory changes</li></ul>Minimum Qualifications<ul><li>Bachelor degree in Computer Science, Information Security, Engineering or equivalent</li><li>5-7 years in cybersecurity / information security roles</li><li>Experience in a SOC environment or with managed detection &amp; response services</li><li>Hands-on experience in security audits and assessments</li><li>Strong technical skills: networking, logging &amp; monitoring, vulnerability management</li><li>Certifications: ISO 27001 LA, ISO 27001 LI, CISA, CISSP, CISM, or equivalent</li><li>Experience with major frameworks (ISO 27001, NIST, SOC, etc.)</li><li>Excellent report writing and stakeholder management skills</li><li>Strong ethical standards, confidentiality, and objectivity</li></ul>Preferred / Advantageous<ul><li>Experience in your industry or regulatory regime</li><li>Experience in cloud security (AWS, Azure, GCP)</li><li>Experience with threat hunting, red teaming, or offensive security</li><li>ISO 27001 Lead Auditor certification</li><li>Experience in privacy / data protection compliance</li></ul> Language Arabic &amp; English is a must

Information Security Consultant / Auditor

Inbox Business Technologies

<div>We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC). The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations, like GDPR, SAMA, NESA, NCA, PDPL etc.
Job Description:
ISMS Responsibilities:<ul><li>
Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and develop corrective action plans.</li><li>
Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.</li><li>
Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.</li><li>
Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.</li><li>
Provide guidance on security incident management and business continuity planning.</li></ul>
IT GRC Responsibilities:<ul><li>
Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.</li><li>
Conduct IT risk assessments and define risk treatment plans.</li><li>
Ensure compliance with regulatory requirements such as GDPR, NIST, GDPR, and local cybersecurity regulations.</li><li>
Design and implement IT compliance and risk management programs, policies, and controls.</li><li>
Provide advisory services on third-party/vendor risk management.</li><li>
Assist organizations in aligning IT strategy with business objectives through effective governance practices.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Computer Science, or IT-related field.</li>
<li>Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.</li>
<li>Experience: Minimum 6&ndash;8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.</li>
<li>Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.</li>
<li>Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li>
<li>Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.</li>
<li>Excellent report writing, communication, and stakeholder management skills.</li></ul></div>

Senior Consultant - ISMS/GRC

QBID Infotech 

Job Title: SailPoint IIQ Consultant &ndash; CybersecurityExperience: 4+ Years Location: RemoteShift - UK Shift ( 2:00 pm to 6:00 pm IST ) Job Type: Contractual Duration: 6 months - 12 months Industry: Cybersecurity / IT Services / Identity &amp; Access Management (IAM)Job Summary:We are hiring a SailPoint IdentityIQ (IIQ) Consultant for a remote contractual opportunity. The candidate should have hands-on experience in implementing and managing IAM solutions using SailPoint, with a good understanding of cybersecurity principles.Key Responsibilities:<ul><li>Configure and customize SailPoint IIQ components (workflows, connectors, rules).</li><li>Implement user provisioning, access certifications, and role management.</li><li>Integrate SailPoint with external systems like AD, LDAP, and SaaS applications.</li><li>Perform troubleshooting and support for SailPoint-related issues.</li><li>Collaborate with security and compliance teams for governance and policy alignment.</li><li>Document technical configurations and processes.</li></ul>Required Skills:<ul><li>Minimum 4 years of hands-on experience with SailPoint IdentityIQ (IIQ).</li><li>Strong understanding of IAM concepts, RBAC, and access governance.</li><li>Experience in Java/BeanShell scripting for customization.</li><li>Good knowledge of Active Directory, LDAP, and system integrations.</li><li>Familiarity with cybersecurity best practices and compliance standards.</li></ul>Job Type: Full-timePay: &#8377;900.00 - &#8377;1,200.00 per hourBenefits:<ul><li>Leave encashment</li></ul>Work Location: Remote

SailPoint IIQ Consultant – Identity Security & Cybersecurity

Cyberr

Are you an experienced Security Consultant looking to drive cybersecurity excellence across multiple industries? CYBERR, the leading platform connecting top cybersecurity professionals with forward-thinking organizations, is actively seeking talented Security Consultants to support a variety of leading companies. This is your opportunity to work with cutting-edge technologies, enhance your career, and help businesses secure their digital environments.At CYBERR, we are transforming how cybersecurity talent and companies come together. Our platform is trusted by top organizations from startups to global enterprises in their mission to strengthen and protect their digital ecosystems. Join us to work on diverse and challenging projects, where you'll play a pivotal role in shaping the security strategies of some of the most prominent companies in the world.We are hiring Security Consultants for multiple leading companies. These positions are remote with global opportunities available.As a Security Consultant, your responsibilities will include assessing and advising on the security posture of organizations, helping them identify vulnerabilities, mitigate risks, and implement best practices. You ll work closely with leadership and technical teams to develop and implement robust security strategies that align with business goals while meeting regulatory requirements. You will conduct thorough security assessments, audits, and risk analyses to identify potential weaknesses, and provide actionable recommendations for improvement. Additionally, you ll be responsible for developing and enforcing security policies, procedures, and standards across various security domains, such as network, application, cloud, and data security. As part of your role, you ll also assist organizations in preparing for audits and certifications, ensuring compliance with industry standards and regulations like NIST, ISO, GDPR, and others.To be successful in this role, you should have strong experience in consulting on cybersecurity solutions, including risk management, security architecture, and compliance.&nbsp;

Security Consultant

Google

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience. 
</li>
<li>5 years of experience delivering cyber outcomes, identifying mission risks, and devising solutions to combat public sector focused threats. 
</li>
<li>4 years of experience assessing and developing cybersecurity solutions across multiple security domains. 
</li>
<li>Ability to communicate in Arabic and English fluently as this is a customer-facing role that requires interactions in Arabic and English with local stakeholders. 
</li>
<li>Ability to travel up to 50% of the time as required.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Experience with enterprise networking and network segmentation strategies, Agile program and project management, SCRUM methodology, DevSecOps, Governance, Risk, and Compliance practices, NIST Cybersecurity Framework.</li>
<li>Experience with enterprise security controls in on-premises and cloud infrastructures, Zero Trust Architecture, Secure Enterprise Platforms Architecture, Identity providers such as Google Cloud Platform, Active Directory, Salesforce, Business-to-Business/Business-to-Consumer identities and collaboration platforms.</li>
<li>Experience with Privileged Access Management best practices.</li>
<li>Experience with Unix endpoint hardening and security control enforcement.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats. 
 
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. 

Mandiant Security Transformation Services helps organizations build an security operations program that minimizes organizational risk and reduces the impact of security breaches. With aimed focus in on-premises and cloud architecture, our consultants work from initial assessment, on-site workshops to explore clients on-premises and cloud environment, configuration review of security controls, to detailed practical technical recommendations to harden the on-premises and cloud environment, enhance visibility and detection, and improve processes to reduce the risk of compromise.<div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Identify solution issue trends, and collaborate internally to mitigate future risks.</li>
<li>Develop improved solution delivery methods and contribute to solution innovation initiatives.</li>
<li>Advise on technical best practices, optimize stakeholder processes, and build relationships.</li>
<li>Collaborate with stakeholders to define solutions and address escalations.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Cloud Security Architect, Cloud and Infrastructure, Mandiant (Arabic, English)

<div>Job Summary:
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.<h3 class="jobSectionHeader">
Job Description:</h3>
ISMS Responsibilities:<ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul>
IT GRC Responsibilities:<ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul>
Requirements<ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul></div>

Consultant - ISMS/GRC

<div>
 
 Job Summary:
 
 
 
 We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.
 
 
 
 Job Description:
 
 
 
 
 ISMS Responsibilities:
 
 
 
 <ul>
 <li>
 Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).
 </li>
 <li>
 Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.
 </li>
 <li>
 Participate in risk assessments and help develop mitigation strategies.
 </li>
 <li>
 Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.
 </li>
 <li>
 Prepare documentation and provide support during ISO 27001 certification audits.
 </li>
 <li>
 Conduct security awareness training and incident management processes.
 
 
 </li>
 </ul>
 
 IT GRC Responsibilities:
 
 
 
 <ul>
 <li>
 Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).
 </li>
 <li>
 Support IT risk assessments, compliance audits, and regulatory reporting activities.
 </li>
 <li>
 Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.
 </li>
 <li>
 Support in developing and maintaining IT compliance programs and policies.
 </li>
 <li>
 Contribute to the development and implementation of GRC tools and processes.
 </li>
 <li>
 Participate in internal audits and help clients prepare for external certification audits/compliance checks.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Minimum Bachelor's degree in Information Security, Computer Science, or a related field.
 </li>
 <li>
 Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.
 </li>
 <li>
 Experience: 3-4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.
 </li>
 <li>
 Familiarity with ISO 27001 gap assessments, risk assessments, and audits.
 </li>
 <li>
 Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).
 </li>
 <li>
 Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.
 </li>
 <li>
 Strong documentation, report writing, and communication skills is a must.
 </li>
 </ul>
</div>

Search 10000+ Information security consultant jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 information security consultant jobs NEAR_ME

Information Security Consultant / Auditor

Senior Consultant - ISMS/GRC

SailPoint IIQ Consultant – Identity Security & Cybersecurity

Security Consultant

Cloud Security Architect, Cloud and Infrastructure, Mandiant (Arabic, English)

Consultant - ISMS/GRC

Consultant - ISMS/GRC