Senior Consultant – Information Security (GRC)

Job Overview

Key Responsibilities

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party and vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Requirements

• At least 10 years of experience in information security GRC.
• Bachelor's or master's degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP, CISM, or CISA certification is preferred.
• CRISC certification is preferred.
• ISO 27001 Lead Implementer or Lead Auditor certification is preferred.
• CDPSE certification is preferred.