ZipRecruiter

Log In

1

Information Security Consultant Jobs (NOW HIRING)

BayInfotech

IT Security Consultant

Foster City, CA

We have an immediate opening for an information security consultant. Candidate must have the following skill sets as described below. It will be an individual contributor position will not be leading ...

Bayinfotech

IT Security Consultant

Foster City, CA · On-site

We have an immediate opening for an information security consultant. Candidate must have the following skill sets as described below. It will be an individual contributor position will not be leading ...

Peraton

Principal Information Security Consultant

$135K - $216K/yr

Peraton Labs is hiring a Principal Information Security Consultant to be the senior technical authority and trusted advisor for secure architecture and engineering across the Covered California and ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsInformation Security Consultant Jobs

Information Security Consultant information

See salary details

$19

$56

$78

How much do information security consultant jobs pay per hour?

As of Sep 5, 2026, the average hourly pay for information security consultant in the United States is $56.82, according to ZipRecruiter salary data. Most workers in this role earn between $48.08 and $69.95 per hour, depending on experience, location, and employer.

What is an information security consultant?

Information Security Consultants are professionals who help organizations protect their digital assets by assessing security risks, developing strategies, and implementing measures to safeguard information systems. They analyze existing IT infrastructure, identify vulnerabilities, and recommend solutions to prevent data breaches and cyberattacks. Their work often includes compliance assessments, security awareness training, and incident response planning. Information Security Consultants may work independently or as part of a consulting firm, serving a variety of industries.

What are some typical challenges an information security consultant faces during client engagements?

Information Security Consultants often encounter challenges such as balancing security recommendations with the client's business needs, addressing legacy system vulnerabilities, and managing stakeholder expectations regarding risk mitigation. Additionally, consultants must stay current on evolving threats and compliance requirements, which can vary greatly between industries. Effective communication and collaboration with both technical and non-technical teams are essential to ensure security solutions are understood and adopted across the organization.

What are the key skills and qualifications needed to thrive as an information security consultant, and why are they important?

To thrive as an Information Security Consultant, you need a deep understanding of cybersecurity principles, risk assessment, and network security, typically supported by a degree in information technology or a related field. Familiarity with security frameworks, vulnerability assessment tools, and certifications such as CISSP or CISM is highly valued. Strong analytical thinking, effective communication, and problem-solving abilities help consultants translate complex security issues into actionable solutions for clients. These skills and qualities are essential for protecting organizations against evolving cyber threats and ensuring compliance with regulations.

What is the difference between Information Security Consultant vs Cybersecurity Analyst?

AspectInformation Security ConsultantCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, GIAC, CISSP (optional)
Work EnvironmentAdvisory roles, consulting firms, client sitesIn-house security teams, security operations centers
Employer & Industry UsageConsulting firms, corporate security departmentsOrganizations with dedicated security teams, government agencies
Primary FocusAssessing security posture, developing policies, advising clientsMonitoring security systems, incident response, threat analysis

While both roles focus on protecting information assets, an Information Security Consultant primarily provides expert advice, assessments, and strategic guidance to organizations. In contrast, a Cybersecurity Analyst actively monitors security systems, responds to incidents, and analyzes threats within an organization. Both roles often require similar certifications and work in related environments, but their day-to-day responsibilities differ significantly.

How much does an information security consultant get paid?

An information security consultant's salary varies based on experience, location, and certifications, but typically ranges from $70,000 to $130,000 annually. Senior consultants with specialized skills or certifications like CISSP can earn higher salaries, often exceeding $150,000. Many consultants also work on a contract basis, which can affect overall earnings.
More about Information Security Consultant jobs

Who are the top companies hiring for Information Security Consultant jobs?

The top employers for Information Security Consultant jobs are:

What states have the most Information Security Consultant jobs?

States with the most job openings for Information Security Consultant jobs include:

What job categories do people searching Information Security Consultant jobs look for?

The top searched job categories for Information Security Consultant jobs are:

What are popular job titles related to Information Security Consultant jobs?

For Information Security Consultant jobs, the most frequently searched job titles are:

Information Security Consultant jobs near you
Infographic showing various Information Security Consultant job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 23% Part Time, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $118,187 per year, or $56.8 per hour.

Senior Information Security Consultant

GDS LINK

Dallas, TX • On-site

Full-time

Re-posted 16 days ago

Job description

Description:

Cyber & GRC / Cloud & Audit Focus


Role Summary

The Senior Information Security Consultant is a senior individual contributor role that spans both Cyber Security and Information Security Governance (GRC). The role owns security controls end-to-end and is directly accountable for ISO 27001 and/or SOC 2 audit outcomes, while remaining hands-on across AWS-hosted environments.


Key Responsibilities

• Own assigned areas of ISO 27001 and/or SOC 2 audits as technical control owner.

• Act as primary technical point of contact for auditors, leading walkthroughs and responding to queries.

• Define, review, and approve technical audit evidence and drive remediation of findings.

• Provide senior hands-on security expertise across AWS (IAM, logging, monitoring, network security).

• Own or oversee vulnerability management, including prioritisation, remediation, and audit-ready reporting.

• Provide senior input into SIEM, monitoring, and incident response.

• Oversee endpoint and SaaS security controls (e.g. Microsoft 365).

• Act as a senior technical authority and coach less-senior team members.

Requirements:

Required Experience


Essential:

• Senior experience in a technical information security role.

• Direct ownership of ISO 27001 and/or SOC 2 audit controls, including auditor interaction and remediation.

• Strong hands-on experience securing AWS-hosted environments.

• Practical experience with vulnerability management, SIEM, and monitoring.

• Strong judgement and ability to explain technical controls to auditors and engineers.


Desirable:

• SaaS or cloud-native environments.

• Familiarity with NIST CSF or CIS Controls.

• Automation or scripting experience.

• Relevant certifications (ISO 27001, AWS Security, CISSP, etc.).