Information Security Consultant
Core
Analyst-level GRC consulting role delivering day-to-day security program work, assessments, and documentation for SLED clients under senior direction.
Role type
Analyst-level GRC Consultant (Delivery)
Builds
Security policies, procedures, standards, BIA documentation, incident response plans, disaster recovery plans, system security plans, vulnerability management plans, and third-party risk documentation
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC service execution, security assessment support, risk identification, policy/procedure development, audit documentation preparation, client communication, independent research
Preferred skills
SEC530 familiarity, Virginia public-sector compliance knowledge, cross-functional security planning understanding, audit remediation ownership
Technologies
NIST 800-53, HIPAA, PCI DSS, KnowBe4
Responsibilities
Perform assigned GRC service and planning tasks, support security assessments and identify risks, maintain and update core deliverables, facilitate client meetings, interact directly with clients, support audit and compliance activities, customize security awareness training, manage deadlines and quality expectations, conduct independent research
Seniority
Mid-level, hands-on IC
