Information Security Consultant – GRC Lead (ISO 27001)

About the role

We are seeking an experienced Information Security IT Governance, Risk & Compliance (GRC) Lead to own and evolve our client’s ISO 27001‑certified environment across multiple business entities. You will work closely with senior stakeholders to strengthen risk management, ensure regulatory compliance, and drive continuous security improvements.

Key responsibilities

• Lead and coordinate the rollout, enhancement, and ongoing management of the Information Security Management System (ISMS).
• Oversee ISO 27001 compliance initiatives across various business units and group companies.
• Identify, assess, and monitor information security and IT‑related risks, implementing effective mitigation strategies.
• Design, review, and maintain security policies, procedures, controls, and governance documentation.
• Manage internal and external audits, certification activities, and compliance assessments.
• Establish and maintain governance structures, risk registers, reporting frameworks, and compliance metrics.
• Prepare and present risk, compliance, and project updates to executive leadership and senior management.

Required profile

• At least 5 years of experience in Information Security, IT Governance, Risk Management, or Compliance.
• Demonstrated success in delivering ISO 27001 implementation, certification, or continuous improvement programs.
• ISO 27001 Lead Implementer, Lead Auditor, or comparable certification preferred.
• Strong project and program management capabilities with the ability to manage multiple initiatives simultaneously.

Required skills

• ISO 27001
• IT Governance
• Risk Management
• Compliance
• Project Management