InfoSec consulting jobs (self-employed) ?

Just curious who is doing it, and what they are doing, when the term "InfoSec consultant" is mentioned. What does this mean, exactly ? What kind of income are people pulling in ? Is their more money in this versus working as an employee of a company ?

Thank You