Job Description:
The Senior Consultant, GRC for Proactive Services is focused on assisting our Goverance, Risk, and Compliance team across a comprehensive portfolio of clients.
The individual will assess security risk across multiple frameworks and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity risk management and will provide strong recommendations in this domain.
Responsibilities include, but are not limited to:
- Assist Unit 42 Leadership in the development of Risk Management, Compliance, and Security standards within professional services
- Deep industry knowledge of best practices within Governance Risk and Compliance and ability to provide recommendations to proactively improve our clients’ security posture
- Act as a key member of our team, learning to lead audits, risk assessments, and other engagement-related duties in accordance with industry regulations, standards, and company policies and procedures for assurance and continuous improvement of controls
- The ability to work across multiple frameworks and regulatory standards including, but not limited to, NIST CSF, ISO, GDPR, SOX, HIPPA
- Monitor progress, manage risk and ensure key stakeholders are kept informed of progress and expected outcomes while defining potential impacts and creating an effective mitigation strategy
- Skilled at proactively identifying security risks and vulnerabilities while eliminating cybersecurity threats
- Interact with prospects and clients by assisting with completing security questionnaires, assessments, and audits
- Ensure controls meet legal, regulatory, privacy, policy, standards, and security requirements
- Effectively write and communicate audit, assessment, or compliance engagement reports and provide recommendations to client management
- Ability to perform travel requirements as needed to meet business demands (on average ~30%)
US Located Required: Yes
Location: Washington, DC, USA
Schedule: Full time
Salary: 127K – 159K
