Security Researcher

We're looking for a Compliance Consultant / Information Security Consultant to help organisations strengthen their information security, governance, and compliance capabilities. Working with a diverse client base, you'll support businesses on their journey towards achieving and maintaining certifications such as ISO 27001, while also helping them build effective security frameworks, governance processes, and risk management practices.

This is a varied consulting role where no two client engagements are the same. You may be supporting a client through an internal audit ahead of a certification assessment, identifying gaps between their current controls and industry standards, or providing practical guidance on implementing governance, risk, and compliance best practices. You'll work closely with organisations of different sizes and levels of maturity, helping them improve their security posture and navigate evolving compliance requirements.

We're particularly interested in someone who is eager to grow, enjoys solving problems, and can build trusted relationships with clients. While experience in information security and compliance is important, we're equally looking for someone with the curiosity, initiative, and drive to develop into a broader trusted advisor over time.

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.

Skills and Experience

You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
You possess a good understanding of ISO 27001 and information security management system principles.
You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
You are self-motivated, proactive, and comfortable taking ownership of your work and development.
You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.
Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.

Nice to have:

ISO 27001 Internal Auditor certification.
Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

About Ideagen

Ideagen is the invisible force behind many things we rely on every day - from keeping airplanes soaring in the sky, to ensuring the food on our tables is safe, to helping doctors and nurses care for the sick. So, when you think of Ideagen, think of it as the silent teammate that's always working behind the scenes to help those people who make our lives safer and better. Everyday, millions of people are kept safe using Ideagen software. We have offices all over the world including America, Australia, Malaysia and India with people doing lots of different and exciting jobs. We’re building a future-ready team, and AI is part of how we work smarter. If you're curious, adaptable and open to using AI to improve how you work, you’ll thrive at Ideagen!

What is next?

If your application meets the requirements for this role, our Talent Acquisition team will be in touch to guide you through the next steps.

To ensure a flexible and inclusive process, please let us know if you require any reasonable adjustments by contacting us at . All matters will be treated with strict confidence.

At Ideagen, we value the importance of work-life balance and welcome candidates seeking flexible arrangements. If this is something you are interested in, please let us know during the application process. Enhance your career and make the world a safer place!

#INDHP

Originally posted on Himalayas

Job Description

Role Purpose

Location- USA

Level - Consultant (Full time position)

Department - Customer

Benefits - Benefits at Ideagen

Salary - To be discussed at next stage

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.

Skills and Experience

You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
You possess a good understanding of ISO 27001 and information security management system principles.
You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
You are self-motivated, proactive, and comfortable taking ownership of your work and development.
You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.
Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.

Nice to have:

ISO 27001 Internal Auditor certification.
Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

About Ideagen

What is next?

If your application meets the requirements for this role, our Talent Acquisition team will be in touch to guide you through the next steps.

To ensure a flexible and inclusive process, please let us know if you require any reasonable adjustments by contacting us at . All matters will be treated with strict confidence.

#INDHP

Originally posted on Himalayas

Job Description

Role Purpose

Location- USA

Level - Consultant (Full time position)

Department - Customer

Benefits - Benefits at Ideagen

Salary - To be discussed at next stage

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.

Skills and Experience

You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
You possess a good understanding of ISO 27001 and information security management system principles.
You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
You are self-motivated, proactive, and comfortable taking ownership of your work and development.
You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.
Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.

Nice to have:

ISO 27001 Internal Auditor certification.
Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

About Ideagen

What is next?

If your application meets the requirements for this role, our Talent Acquisition team will be in touch to guide you through the next steps.

To ensure a flexible and inclusive process, please let us know if you require any reasonable adjustments by contacting us at . All matters will be treated with strict confidence.

#INDHP

Originally posted on Himalayas

Job Description

Role Purpose

Location- USA

Level - Consultant (Full time position)

Department - Customer

Benefits - Benefits at Ideagen

Salary - To be discussed at next stage

Responsibilities

Conduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.
Review policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.
Assess clients' existing governance, risk, and security frameworks against industry standards and best practices.
Produce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.
Support organisations in implementing and improving information security controls and compliance processes.
Facilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.
Conduct information security risk assessments and support the development of effective risk treatment plans.
Build trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.

Skills and Experience

You have experience working within information security, compliance, governance, risk, audit, or a related discipline.
You possess a good understanding of ISO 27001 and information security management system principles.
You have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.
You communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.
You enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.
You are self-motivated, proactive, and comfortable taking ownership of your work and development.
You are keen to grow your expertise across information security, governance, risk, and compliance consultancy.
Experience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.

Nice to have:

ISO 27001 Internal Auditor certification.
Exposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.
Experience working with clients in regulated industries.
Knowledge of information security controls, cloud technologies, risk management, or security governance practices.

About Ideagen

What is next?

If your application meets the requirements for this role, our Talent Acquisition team will be in touch to guide you through the next steps.

To ensure a flexible and inclusive process, please let us know if you require any reasonable adjustments by contacting us at . All matters will be treated with strict confidence.

#INDHP

Originally posted on Himalayas