Information Security Consultant - US (SMB) at Cognisys

, , United States -

Full Time

Start Date

Immediate

Expiry Date

04 Aug, 26

Salary

95000.0

Posted On

06 May, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

GRC Consulting, ISO 27001, SOC 2, NIST, Risk Assessment, Gap Analysis, Security Posture Assessment, Audit Preparation, Policy Development, French Fluency, German Fluency, Vanta, Stakeholder Management, Remediation Planning, Governance, Compliance

Industry

IT Services and IT Consulting

Description

Location: USA (Remote) Salary: $85,000 - $95,000 We have an exciting opportunity for an experienced Information Security Consultant to join us at a time of rapid growth at Cognisys. Cognisys is a leading Cyber Security company specialising in Penetration Testing, GRC Consulting, and Managed Security services. We pride ourselves on our customer service, forward-thinking approach and commitment to excellence. Our small but mighty team works with some of the best-known companies in the world, covering over 30 different countries across the globe! About the Role Our GRC Consulting practice helps organisations strengthen their security posture and achieve compliance through clear, structured, and practical guidance. We work with clients at different stages of maturity, from building foundational security programmes to operating mature, scalable compliance functions. We are seeking an Information Security Consultant to join our GRC Consulting team. This is a client-facing, delivery-focused role suited to a security and compliance professional who is confident supporting engagements and contributing high-quality advisory services. As an Information Security Consultant, you will support the delivery of GRC engagements across a range of clients and industries. You will help translate regulatory and framework requirements into practical, business-aligned solutions and work collaboratively with senior consultants and client stakeholders to drive measurable improvements in governance, risk, and compliance. This role suits someone with strong foundational GRC knowledge, growing consulting experience, and a desire to develop into a trusted security advisor. Key Responsibilities Client Delivery & Support Lead the delivery of GRC consulting engagements across multiple clients and sectors. Contribute to security posture assessments, gap analyses, and maturity reviews. Assist in the design and implementation of GRC programmes aligned to frameworks such as ISO 27001, SOC 2, NIST, and related standards. Support clients through audit preparation, certification processes, and external assessments. Develop remediation plans and assist clients in tracking progress against agreed actions. Participate and lead in client workshops, risk assessments, and stakeholder sessions. Contribute to the design and documentation of security controls and operating models. Help embed compliance activities into operational and technical processes. Conduct risk assessments and maintain supporting documentation. Quality & Professional Standards Produce high-quality client deliverables with clarity, accuracy, and consistency. Follow established methodologies, templates, and internal quality standards. Proactively identify areas for improvement within engagements. Manage assigned tasks effectively to meet deadlines and scope expectations. Advisory & Technical Contribution Support the interpretation of security standards and regulations, translating requirements into practical recommendations. Lead in the development of policies, procedures, risk registers, control frameworks, and governance documentation. Requirements 2–5 years’ experience in security, risk, compliance, or GRC-related roles. Must be fluent in French and ideally German. Practical experience with at least one framework such as ISO 27001, SOC 2, NIST, or similar standards. Experience supporting compliance or assurance initiatives (internal or client-facing). Strong written and verbal communication skills. Ability to manage multiple priorities in a structured and organised manner. Analytical mindset with a pragmatic approach to problem solving. Comfortable working with both technical and non-technical stakeholders. Consulting experience is highly desirable but not essential. Experience with GRC platforms including Vanta is desirable. If you think you can deliver but don't match the criteria above, please don't be put off. We are very open-minded and focus on ability and attitude above skills. What We Offer A dynamic and supportive work environment where customer care and innovation drive everything we do. A dedicated budget for your professional development Access to an Employee Wellness Hub supported by Kara Connect for health and well-being resources. Frequent team social events and celebrations. 25 days holiday, plus a birthday holiday. Refer a friend bonus scheme, up to £2,000! Why Join Us? At Cognisys, you will be part of a collaborative and innovative team that values your input and shares support. You'll have the opportunity to work on challenging projects that make a real impact for our clients. We'd love to hear from you if you want to challenge, lead and innovate! We're not just about the work; we're about the people. Join a team where innovation is celebrated, and your contributions are valued. We foster a collaborative environment where fresh ideas thrive, and professional growth is encouraged. Applications We’re always happy to help with questions, but to keep our process fair for everyone, we’re unable to accept applications via email—please apply directly through the job advert page. Please feel free to reach out to Andrea, our Senior Recruiter, if you would like any further information, to discuss accessibility requirements, or if you require this information provided in an alternative format - andrea.smith@cognisys.group We welcome applications from candidates from a range of diverse backgrounds and can make various reasonable adjustments to consider individual needs.

Responsibilities

Lead the delivery of GRC consulting engagements, including security posture assessments and the implementation of frameworks like ISO 27001 and SOC 2. Develop security policies, risk registers, and remediation plans to help clients improve their governance and compliance.