Senior Information Security Consultant, Cognisys
$90-100k
Cyber security, pen testing & compliance experts
Be an early applicant
Cyber security, pen testing & compliance experts
21-100 employees
Be an early applicant
$90-100k
21-100 employees
Company mission
To help protect businesses from cyber attackers.
Role
Who you are
- This is a client-facing, delivery-led role for an experienced security and compliance professional who can lead engagements, own client relationships, and provide high-quality advisory services
- This role suits someone who combines strong technical GRC knowledge with consulting experience, confidence in client delivery, and a desire to raise the standard of security governance across organisations
- 5+ years’ experience in security, risk, compliance, or GRC-focused roles
- Strong practical experience with one or more frameworks such as ISO 27001, SOC 2, NIST, or similar
- Proven experience delivering client-facing GRC or compliance engagements
- Confidence leading client meetings, workshops, and complex discussions
- Ability to design security governance and compliance programmes, not just implement them
- Strong written communication skills, with experience producing high-quality client documentation
- Experience mentoring or supporting the development of junior team members
- Strong organisational skills and ability to manage multiple engagements and priorities
- A pragmatic, solutions-focused mindset with an understanding of business realities
- Consulting experience is highly desirable
What the job involves
- We are seeking a Senior Information Consultant to join our GRC Consulting team
- You will play a key role in shaping client outcomes, mentoring junior team members, and helping evolve our GRC delivery capability
- Our GRC Consulting practice helps organisations strengthen their security posture and achieve compliance through clear, structured, and practical guidance. We work with clients at different stages of maturity, from building foundational security programmes to operating mature, scalable compliance functions
- As a Senior Information Security Consultant, you will take responsibility for designing and delivering GRC engagements end-to-end. You will translate regulatory and framework requirements into practical, business-aligned solutions, guide clients through complex compliance challenges, and act as a trusted advisor to technical and non-technical stakeholders alike
- Lead and deliver GRC consulting engagements across a range of clients and industries
- Act as the primary point of contact for assigned clients, owning delivery quality and client satisfaction
- Design and implement GRC programmes aligned to frameworks such as ISO 27001, SOC 2, NIST, and related standards
- Lead security posture assessments, gap analyses, and maturity reviews
- Develop practical remediation roadmaps and guide clients through implementation
- Support clients through audit preparation, certification, and external assessments
- Facilitate client workshops, risk assessments, and stakeholder sessions with confidence and authority
- Provide expert guidance on security governance, risk management, and compliance strategy
- Interpret standards and regulations and translate them into pragmatic, business-focused solutions
- Advise clients on control design, operating models, and sustainable compliance practices
- Support the development of client security documentation including policies, procedures, risk registers, control frameworks, and governance models
- Help clients embed compliance into operational and technical processes rather than treating it as a one-off activity
- Own the quality of client deliverables, ensuring accuracy, clarity, and consistency with internal standards
- Review and provide constructive feedback on work produced by junior consultants and analysts
- Continuously improve delivery playbooks, templates, and methodologies
- Ensure engagements are delivered on time, within scope, and to a high professional standard
- Mentor and support junior team members, accelerating their technical and consulting development
- Provide guidance, coaching, and informal line management support where required
- Act as a role model for consulting best practice and professional conduct
- Contribute to building a collaborative, high-performing team culture
- Identify opportunities to improve delivery efficiency, tooling, and ways of working
- Contribute to the development of a scalable and repeatable GRC consulting model
- Support pre-sales activity where required, including scoping, proposal input, and client discovery sessions
- Help shape the strategic direction of the GRC practice through feedback and innovation
Application process
- Contact: Andrea Smith
Our take
Many businesses are struggling to keep up with rising cyber threats, complicated regulations and the constant risk of data breaches. For organisations without in-house specialists, staying secure can become overwhelming. So, Cognisys has stepped in to make this manageable. They're a UK-based cybersecurity and compliance company helping organisations spot vulnerabilities early and build stronger digital defences.
Cognisys delivers this through services like penetration testing, continuous vulnerability management, and support for certifications such as ISO 27001. By simplifying security and offering ongoing guidance, they give businesses confidence that their systems are protected and up to standard. Resulting in fewer risks, fewer headaches, and more room for companies to get on with the work that matters to them.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Company HQ
Leeds Dock, Leeds, UK
Leadership
Steve Spence
(CEO)Steve previously founded Pure Technology Group and Servatech.
Arjun P.
(CTO)Arjun is the founder of Edge Secure. Previously, he was a Technical Director at Defendza, a Check Team Leader at NCC Group, and a Senior Security Analyst at Tech Mahindra.
Share this job
View 5 more jobs at Cognisys