Senior Security Consultant – GRC

This is a fully remote position, open to applicants in Texas.

📋 Description

• Act as a trusted advisor to clients on governance, risk management, compliance (GRC), cybersecurity governance, and the maturity of security programs.

• Independently lead and execute consulting engagements that are client-facing.

• Perform security assessments focusing on governance, risk, compliance, and the effectiveness of controls.

• Facilitate risk assessments and conduct tabletop exercises covering enterprise, cyber, third-party, and incident-response scenarios.

• Create governance models, security frameworks, data governance blueprints, policies, standards, and operational procedures.

• Aid in internal audit preparedness, compliance reporting, evidence validation, remediation planning, and tracking of issues.

• Collaborate with sales teams, technical specialists, and practice leaders to ascertain client requirements and propose suitable solutions.

• Enhance methodologies, remain updated on industry trends, optimize cross-practice capabilities, and mentor fellow consultants.

⛳️ Requirements

• A Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related discipline, or equivalent practical experience.

• Over 7 years of experience in governance, risk, and compliance is required.

• Previous experience in cybersecurity advisory or internal audit within a client-facing professional services setting is highly preferred.

• Background in working for a cybersecurity services provider, consulting firm, advisory practice, or professional services organization.

• Willingness to travel to SHI, Partner, and Customer Events up to 10% of the time.

• Relevant industry certifications are strongly preferred, including but not limited to CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor.

• Proficiency in developing governance models, security frameworks, policies, standards, and operational procedures.

• Skilled in implementing and managing cloud security frameworks, compliance standards, and governance models.

• Familiar with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust, or similar solutions.

• Capable of overseeing and directing projects to successful completion.

• Ability to examine, clean, transform, and model data effectively.

• Proficient in Microsoft Word, Excel, PowerPoint, and Outlook.

• Hands-on experience in GRC advisory services, security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews.

• Working knowledge of standards such as NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA.

🏝️ Benefits

• Opportunities for continuous professional development and leadership growth.

• Comprehensive health, wellness, and financial benefits.

• Access to state-of-the-art facilities and technology for office or remote work.

• Medical, vision, dental, 401K, and flexible spending benefits may be included.

• Bonus potential is included in the estimated annual pay range.