Information Security Consultant (SMB) – Remote (Philippines)

About the role

Cognisys is expanding its GRC Consulting practice and seeks an Information Security Consultant to work remotely with SMB clients in the Philippines. You will partner with organisations at various stages of their security journey, translating regulatory requirements into practical, business‑aligned solutions.

Key responsibilities

• Lead and support delivery of GRC consulting engagements across multiple sectors.
• Conduct security posture assessments, gap analyses and maturity reviews.
• Design and implement GRC programmes aligned with ISO 27001, SOC 2, NIST and related standards.
• Assist clients with audit preparation, certification processes and external assessments.
• Develop remediation plans and track progress against agreed actions.
• Facilitate client workshops, risk assessments and stakeholder sessions.
• Build trusted relationships and provide practical, business‑focused security advice.
• Manage multiple client engagements, ensuring timely and high‑quality delivery.

Required profile

• Strong foundational knowledge of Governance, Risk & Compliance (GRC) concepts.
• Experience supporting consulting engagements and delivering advisory services.
• Desire to develop into a trusted security advisor for SMB clients.

Required skills

• ISO 27001
• SOC 2
• NIST framework
• Information security risk assessment
• GRC programme design and implementation

What we offer

• Opportunity to work with a diverse range of clients and industries.
• Remote work flexibility.
• Competitive compensation package.