Cyber Security Consultant

SUMMARY:
Join the team at Barefoot Cyber!

Barefoot Cyber is a partner at IT Naledi Solutions.

If you're ready to take the next step in your career, we'd love to hear from you: employment@itnaledi.co.za

See below for details on this exciting opportunity:  
 
We are seeking an experienced Cyber Security Consultant to support our clients in an advisory role across governance, risk, compliance, privacy, and security operations. This role is suited to a consultant who can bridge the gap between technical cybersecurity issues and business decision-making, helping clients strengthen their security posture, meet regulatory obligations, and build practical, risk-based security programmes. 

The successful candidate will support clients with activities such as cyber maturity assessments, ISMS programmes, internal audits, risk management, incident response coordination, compliance guidance, client reporting, and strategic security planning.  

This is primarily a consulting and advisory role rather than a hands-on engineering or implementation role. The consultant will work closely with internal Infrastructure and SOC teams to guide best practice, requirements, and remediation priorities.

POSITION INFO:

Key Responsibilities

• Act as a cyber security advisor to clients, providing strategic guidance across governance, risk, compliance, and “owning” the security programme.

• Translate technical security issues, risks, and incidents into clear business language for leadership, management, and client stakeholders.

• Lead or support cyber risk assessments, gap assessments, internal audits, and remediation planning against recognised frameworks and standards.

• Maintain and improve security governance documentation, including policies, procedures, risk registers, and compliance-related records.

• Support clients with ISO 27001, privacy, and broader regulatory compliance activities, including audit preparation and ongoing control improvement.

• Coordinate incident response activities from a consulting perspective, guiding communication, escalation, stakeholder alignment, and post-incident review.

• Prepare and present client-facing reports, dashboards, and cyber maturity assessments with clear, actionable recommendations.

• Work closely with internal consulting, infrastructure, and SOC teams to guide security best practice and help drive successful project outcomes.

• 2+ years of experience in cybersecurity, information security, GRC, compliance, or related advisory roles, or

• Experience working with clients in a consulting, advisory, or customer-facing capacity.

• Experience supporting ISMS implementation, risk management, internal audits, or compliance programmes.

• Experience producing professional reports, presenting to stakeholders, and translating technical issues into business impact.

• Ability to interpret security findings and express them clearly in business terms.

• Sound judgement and a practical, risk-based approach to problem-solving.

• Foundational understanding of cloud security, infrastructure, endpoint security, Microsoft 365 security concepts, and managed security services.

• Ability to work independently while also collaborating effectively with Infrastructure, SOC, and consulting teams.

• Experience in managed security services, vCISO engagements, or compliance-driven consulting.

• Familiarity with GRC platforms, awareness platforms, Microsoft 365 security and compliance features, and SIEM/EDR concepts.

• Exposure to regulated environments and external certification or assurance audits.

• Experience supporting phishing awareness, policy uplift, and security culture initiatives.

• Professional and credible with clients and senior stakeholders.

• Commercially aware and able to align security to business outcomes.

• Confident facilitator and communicator.

• Detail-oriented while able to see the broader strategic picture.

• Self-motivated, curious, and committed to continuous learning.

• Calm and structured under pressure, especially during incidents or high-priority engagements.

• Strong written and verbal communication skills.

• Excellent stakeholder management and client engagement capability.

• Strong organisational skills with the ability to manage multiple client priorities.

• Relevant industry certifications in security, governance, privacy, or risk management

• Diploma or Degree in Information Security, Computer Science, Information Systems, Risk, Compliance, or a related field experience

• CISSP, CISM or working towards a similar certification

• ISO 27001 Lead Implementer

• Privacy or compliance-related certifications

• Project management certification

• The processing of your personal information and sharing it with third parties for verification.
• The exercising of your rights provided for by POPIA.
• To acknowledge that IT Naledi Solutions (Pty) Ltd will keep the record of your personal information confidential.