Senior Information Governance Consultant

Company: Evolve North Ltd
Role: Senior Information Governance and Cyber Security Consultant
Employment Type: Part Time
Salary: Subject to experience
Location: Remote Working / North of England & Yorkshire / UK Client Travel
Reporting: Technical Director

The Company

Evolve North is a specialist information security, cyber resilience and information governance consultancy supporting organisations across regulated public and private sectors. We are seeking an experienced consultant to join our team, delivering a balanced mix of assurance, governance, and cyber resilience services to our clients.

The Role

The successful candidate will play a key role in supporting organisations to design, implement, review, and mature their information security and information governance arrangements. The role includes hands on delivery of ISO 27001 and ISO 9001 related activity, including scoping, objectives, internal audit support, surveillance preparation, and ongoing ISMS governance. You will work closely with client stakeholders to translate standards and regulatory requirements into proportionate, practical controls that reflect real operational risk.

Alongside assurance activity, the role includes delivery of cyber incident resilience services. This includes designing and facilitating cyber incident tabletop exercises, supporting clients to understand incident governance, escalation, communications, regulatory considerations, and operational resilience. You will produce clear written outputs that identify strengths, gaps, and prioritised improvement actions, aligned to recognised guidance and standards such as ISO 27001, NCSC guidance, and data protection regulation.

You will also support clients across a range of data protection activities, including interpreting UK GDPR requirements, advising on lawful processing, accountability and governance structures, and supporting organisations with policies, procedures and documentation. This requires the ability to translate legislation into practical, proportionate controls, alongside experience of working with senior stakeholders on areas such as breach management, DPIAs and regulatory engagement. A strong understanding of the relationship between data protection, information security and organisational risk is essential.

You will be expected to build trusted relationships with senior leaders, acting as a credible adviser on risk, governance, and security matters. The role requires confident written and verbal communication, an ability to work independently with clients, and collaboration with colleagues across the consultancy. You will also contribute to the maintenance and development of Evolve North’s internal management systems and service capability.

Candidates should have extensive experience in information security, data protection, or information governance, ideally within regulated environments such as healthcare, transportation, or financial services. Professional certifications such as CISSP or ISO 27001 Lead Implementer are desirable. Experience of incident response planning or exercising is essential.

This role is suited to someone who combines strong technical understanding with a pragmatic, people focused consulting approach.

How to apply

Send your CV and a short note about why this role interests you to info@evolvenorth.com.