Senior Cyber & Information Security Consultant (GRC & ISO27001)

The Role We are looking for a Cybersecurity Consultant to join our Cyber Consultancy team in Belfast. This is a hands-on consulting role focused on delivering cybersecurity and information security engagements, with a strong emphasis on ISO27001 implementations, audit readiness, and governance, risk, and compliance (GRC). You will lead client engagements end-to-end, from initial assessment through to implementation and audit, working closely with client stakeholders to deliver practical, measurable outcomes. What You Will Do Engagement Delivery: - Lead new and existing information and cybersecurity engagements. - Deliver ISO27001 implementations, from gap assessment through to certification readiness. - Deliver cyber incident exercising, including tabletop scenarios and simulations. Audit & Assurance: - Lead internal audits aligned to ISO27001. - Support clients through external audits and certification processes. - Drive remediation activities to close audit findings and strengthen control effectiveness. Risk & Compliance: - Conduct risk assessments and support the development of risk treatment plans. - Develop and implement policies, standards, and controls aligned to ISO27001. - Support clients in embedding effective governance, risk, and compliance practices. Stakeholder Management: - Work directly with client stakeholders to manage delivery, expectations, and outcomes. - Communicate clearly with both technical and non-technical audiences. - Manage multiple engagements and priorities effectively. What You Will Bring Essential: - Minimum 5 years’ experience in cyber or information security roles, with a focus on governance, risk, and compliance. - Proven experience delivering ISO27001 implementations end-to-end, including audit readiness. - Hands-on experience leading internal audits and supporting external audits. - Strong, practical knowledge of ISO27001 and ISMS implementation. - ISO27001 Lead Auditor certification. - Experience in consulting or project-based environments, with strong stakeholder management and communication skills. Nice to Have: - Experience delivering cyber incident exercising. - Knowledge of additional frameworks such as: - CAF (Cyber Assessment Framework) - NIST Cyber Security Framework - ISO22301 Lead Auditor certification (Business Continuity). - ISO42001 Lead Auditor certification (AI Management Systems). - Experience working in regulated or public sector environments. - Eligibility for, or holding, UK Security Clearance (SC). Why Join Instil? At Instil, we believe great work starts with happy, motivated people. That’s why we’ve built a benefits package that supports your wellbeing, growth, and life outside of work, because when you thrive, so do we. - Recognition That Matters: A discretionary annual performance bonus that rewards your impact and contribution to our success. - Flexibility Built In: Flexible working arrangements and summer hours, because life isn’t 9 to 5, and balance matters. - Financial Security: A highly competitive pension scheme with generous employer contributions, private healthcare, and life assurance for peace of mind. - Health & Wellbeing: Employee Assistance Programme, mental health support, cycle-to-work scheme, and regular social events to keep our culture vibrant. - Time to Recharge: 35 days holiday, enhanced maternity pay, and family-first policies so you can focus on what matters most. - Learning Never Stops: From courses to certifications, we’ll invest in your development so you can keep growing and shaping what’s next. - Community & Culture: Opportunities to volunteer, give back, and be part of initiatives that make Instil a truly inclusive and connected workplace. And that’s just the start, drop us a note to find out more. Company Description Instil has been delivering world-class software engineering and technology solutions for over 20 years, trusted by global brands to solve complex challenges and drive innovation. From modernising legacy systems to building…