Senior Security Advisor – GRC

This is a fully remote position, open to applicants in South Carolina.

📋 Description

• Engage with both prospective and current clients to ascertain their security requirements and devise engagement strategies.

• Cultivate an understanding of clients’ business needs and driving factors.

• Spearhead and conduct security evaluations to pinpoint deficiencies in security programs.

• Oversee the comprehensive development of System Security Plans, encompassing control selection, implementation statements, system categorization, and stakeholder coordination for approval.

• Identify cybersecurity-related regulatory obligations and compliance deficiencies, and formulate strategic compliance initiatives.

• Create and assess security policies, procedures, and associated documentation.

• Collaborate with clients and the Soteria team to establish plans of action that achieve the desired outcomes.

• Document and communicate findings and recommendations to clients, including C-Suite and board-level executives.

• Sustain post-assessment client relationships while offering ongoing security consultation.

• Stay updated on security trends, technologies, and practices through self-directed learning and participation in industry events.

• Provide training and mentorship to team members.

• Collaborate with Soteria leadership to develop and refine revenue objectives.

• Supply Finance with necessary data, reports, and project updates.

• Manage Advisory projects, ensuring proactive communication and management of client expectations.

• Conduct business development from initial client referrals or repeat calls through to proposal and contract finalization.

⛳️ Requirements

• Over 10 years of industry experience with a comprehensive understanding of the cybersecurity landscape.

• Prior experience in a cybersecurity consulting position.

• Previous experience in a cybersecurity leadership role.

• Experience in authoring System Security Plans (SSPs).

• Familiarity with RMF or ATO-style processes.

• Knowledge and comprehension of common regulatory and compliance standards such as HIPAA, PCI-DSS, CMMC, GDPR, etc.

• Relevant certifications including CISSP, CISM, CISA, CEH, etc.

🏝️ Benefits

• Remote workforce.

• Flexible scheduling options.

• Occasional travel for client meetings, team gatherings, or other business necessities.