Information Security Consultant

About the role

We are looking for an experienced Information Security Consultant to join a major security transformation programme for a global organisation. The role is fully remote, but candidates must reside in Spain and be eligible to work there. You will help mature security capabilities, improve governance, and support strategic cybersecurity initiatives.

Key responsibilities

• Support delivery of a large‑scale security transformation across multiple workstreams.
• Assess current security controls, processes and operating models, identifying gaps and improvement opportunities.
• Provide expertise in information security governance, risk, compliance and security architecture.
• Collaborate with technical and business stakeholders to define and implement security best practices.
• Assist in developing and enhancing security policies, standards and procedures.
• Support security tooling, control optimisation and remediation activities.
• Contribute to risk assessments, control reviews and audit‑readiness activities.
• Guide regulatory and compliance requirements such as ISO 27001, NIST, GDPR and related frameworks.

Required profile

• Proven experience as an Information Security Consultant or Security Transformation Consultant.
• Strong background delivering security transformation or cybersecurity improvement programmes.
• Experience working within complex enterprise environments.
• Self‑starter able to work independently in a remote setting.

Required skills

• ISO 27001, NIST CSF, CIS Controls, GDPR.
• Cloud platforms: AWS, Azure, GCP.
• Identity and Access Management (IAM).
• Security Operations Centre (SOC) concepts.
• Vulnerability management and security operations transformation.

What we offer

• Competitive day rate, dependent on experience.
• Fully remote work arrangement.
• Potential contract extension beyond the initial six‑month period.