{"id":2189362,"url":"https://alion.io/job/damstra-technology-information-security-consultant","title":"Information Security Consultant","company":{"id":49885,"name":"Damstra Technology","domain":"damstratechnology.com","url":"https://alion.io/company/damstra-technology","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":239000,"period":"year","method":"role_country_seniority_unknown","sample_n":2855},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-09T17:19:22Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-15T00:09:06Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Role Purpose\nLocation- USA\nLevel - Consultant (Full time position)\nDepartment - Customer\nBenefits - Benefits at Ideagen\nSalary - To be discussed at next stage\nWe're looking for a Compliance Consultant / Information Security Consultant to help organisations strengthen their information security, governance, and compliance capabilities. Working with a diverse client base, you'll support businesses on their journey towards achieving and maintaining certifications such as ISO 27001, while also helping them build effective security frameworks, governance processes, and risk management practices.\nThis is a varied consulting role where no two client engagements are the same. You may be supporting a client through an internal audit ahead of a certification assessment, identifying gaps between their current controls and industry standards, or providing practical guidance on implementing governance, risk, and compliance best practices. You'll work closely with organisations of different sizes and levels of maturity, helping them improve their security posture and navigate evolving compliance requirements.\nWe're particularly interested in someone who is eager to grow, enjoys solving problems, and can build trusted relationships with clients. While experience in information security and compliance is important, we're equally looking for someone with the curiosity, initiative, and drive to develop into a broader trusted advisor over time.\nResponsibilities\nConduct internal audits against ISO 27001 and other recognised standards to help clients prepare for external certification assessments.\nReview policies, procedures, controls, and supporting evidence to identify compliance gaps and areas for improvement.\nAssess clients' existing governance, risk, and security frameworks against industry standards and best practices.\nProduce clear audit reports, findings, recommendations, and action plans that deliver practical value to clients.\nSupport organisations in implementing and improving information security controls and compliance processes.\nFacilitate workshops, interviews, and discussions with stakeholders ranging from operational teams to executive leadership.\nConduct information security risk assessments and support the development of effective risk treatment plans.\nBuild trusted client relationships while delivering a high-quality consulting experience across a variety of engagements.\nSkills and Experience\nYou have experience working within information security, compliance, governance, risk, audit, or a related discipline.\nYou possess a good understanding of ISO 27001 and information security management system principles.\nYou have experience conducting audits, reviewing evidence, or assessing controls against recognised frameworks or standards.\nYou communicate effectively with a range of stakeholders and can present complex information in a clear and practical way.\nYou enjoy identifying problems, analysing requirements, and recommending pragmatic solutions.\nYou are self-motivated, proactive, and comfortable taking ownership of your work and development.\nYou are keen to grow your expertise across information security, governance, risk, and compliance consultancy.\nExperience with GRC platforms such as Vanta, Drata, Strike Graph, or similar tools would be advantageous.\nNice to have:\nISO 27001 Internal Auditor certification.\nExposure to standards such as ISO 9001, ISO 22301, ISO 14001, SOC 2, HITRUST, or PCI DSS.\nExperience working with clients in regulated industries.\nKnowledge of information security controls, cloud technologies, risk management, or security governance practices.\nAbout Ideagen\nIdeagen is the invisible force behind many things we rely on every day - from keeping airplanes soaring in the sky, to ensuring the food on our tables is safe, to helping doctors and nurses care for the sick. So, when you think of Ideagen, think of it as the silent teammate that's always working behind the scenes to help those people who make our lives safer and better. Everyday, millions of people are kept safe using Ideagen software. We have offices all over the world including America, Australia, Malaysia and India with people doing lots of different and exciting jobs. We’re building a future-ready team, and AI is part of how we work smarter. If you're curious, adaptable and open to using AI to improve how you work, you’ll thrive at Ideagen!\nWhat is next?\nIf your application meets the requirements for this role, our Talent Acquisition team will be in touch to guide you through the next steps.\nTo ensure a flexible and inclusive process, please let us know if you require any reasonable adjustments by contacting us at . All matters will be treated with strict confidence.\nAt Ideagen, we value the importance of work-life balance and welcome candidates seeking flexible arrangements. If this is something you are interested in, please let us know during the application process. Enhance your career and make the world a safer place!","description_format":"text","description_chars":5014,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Field Service Management Software"],"lifecycle":[{"event":"open","at":"2026-10-09T17:19:22Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.671,"p_room":0.788,"age_days":4,"expected_fill_days":5,"reasons":["conf:2","velocity","win:late"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/damstra-technology-information-security-consultant","json_url":"https://alion.io/job/damstra-technology-information-security-consultant.json","meta":{"generated_at":"2026-10-15T03:01:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4511,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49885},"rest":"https://alion.io/mcp/rest/get_company?id=49885"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdamstra-technology-information-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdamstra-technology-information-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdamstra-technology-information-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/damstra-technology-information-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdamstra-technology-information-security-consultant"}]}