Governance, Risk and Compliance Consultant
Core
Ensure clients' cybersecurity programs comply with industry standards and regulations while operating efficiently to minimize risks.
Role type
Senior IC Governance, Risk, and Compliance Consultant
Builds
Cybersecurity governance frameworks, policies, procedures, and incident response plans for client organizations
Domain
Cybersecurity / Risk Management / Compliance
Required skills
Risk assessment and audit, Policy and procedure development, Compliance assessment, Cybersecurity training program design, Incident response planning, Project management, Framework knowledge (NIST, ISO 27001, Essential 8, CIS Controls), Technical IT knowledge (Cloud, Firewalls, SIEM, EDR, DLP), Cloud platform experience (Microsoft 365, Azure, AWS)
Preferred skills
Experience leading complex project and retainer engagements
Technologies
NIST, ISO 27001/2, Essential 8, CIS Controls, Microsoft 365, Azure, AWS, SIEM, EDR, DLP
Responsibilities
Conduct risk assessments and audits to identify vulnerabilities and cybersecurity risks, Develop and implement policies, procedures, and best practices for information security and compliance, Develop and implement a cybersecurity governance framework, Conduct compliance assessments against standards like ISO 27001, NIST CSF, Essential 8, PCI-DSS, Australian ISM, Privacy Act, and GDPR, Develop and implement cybersecurity training and awareness programs, Work with client technology teams to develop incident response plans and conduct tabletop exercises, Provide guidance and support to internal security teams and other departments on cybersecurity governance
Seniority
Mid-Senior, hands-on IC