Senior Consultant, GRC Advisory
Core
Lead Global Compliance Advisory engagements focusing on NIST 800-53, SOC2, and ISO 27001 frameworks to identify gaps, develop documentation, and evaluate client security systems.
Role type
Senior IC GRC Consultant
Builds
Compliance documentation, risk assessments, and advisory reports for client systems
Domain
Cybersecurity / Compliance Advisory
Required skills
NIST 800-53 expertise, SOC2 expertise, ISO 27001 expertise, risk assessment, gap analysis, policy development, audit readiness, cloud/on-prem architecture knowledge, virtualization knowledge
Preferred skills
CISA, CISM, CISSP, CMMC CCP/CCA, ISO 27001 Lead Auditor/Implementor
Technologies
NIST 800-53, SOC2, ISO 27001, ISO/IEC 27701, CMMC, FedRAMP, FISMA, DoD Cloud SRG
Responsibilities
Lead advisory projects including workshops, gap analyses, and system security plan development; Draft gap analysis and internal audit reports; Develop and review framework documentation (SSP, Statement of Applicability, System Description); Facilitate risk assessment engagements; Identify and communicate compliance gaps with remediation recommendations; Manage priorities to achieve delivery targets.
Seniority
Senior, hands-on IC
