Cybersecurity Consultant (GRC / Cyber Risk Advisory)
REMOTE.
We are looking for an experienced Senior Cybersecurity Consultant with a strong background in Cybersecurity Governance, Risk & Compliance (GRC), Technology Risk, and Cyber Advisory.
Key Responsibilities
- Conduct cybersecurity control assessments across infrastructure, cloud, applications, and third-party environments.
- Perform Information Security Risk Assessments and security maturity reviews.
- Review security architecture and identify control gaps and risk exposure.
- Lead compliance initiatives for ISO 27001, NIST, PCI DSS, SWIFT CSP, and regulatory frameworks.
- Perform IT General Controls (ITGC) and Application Control Testing.
- Design and implement Third-Party Risk Management (TPRM) frameworks.
- Conduct vendor risk assessments and support audit and regulatory engagements.
- Perform Privacy Assessments (PIA/DPIA), Privacy by Design (PbD), and RoPA reviews.
- Support Business Continuity (BCP), Disaster Recovery (DR), and Cyber Resilience exercises.
- Develop security policies, governance frameworks, and client advisory deliverables.
- Contribute to RFPs, proposals, and cybersecurity consulting engagements.
REQUIRED EXPERIENCE
- 6+ years of experience in Cybersecurity Consulting, GRC, Technology Risk, or Information Security Advisory.
- Strong hands-on experience with one or more of the following:
- ISO 27001, NIST Cybersecurity Framework, PCI DSS, SWIFT CSP, ITGC / IT Audit, Third-Party Risk Management (TPRM), Business Continuity & Disaster Recovery & Privacy & Data Protection.
PREFERRED CERTIFICATIONS:
CISA, CISM, CRISC, CISSP & ISO 27001 / 22301 Lead Implementer / Lead Auditor
IDEAL BACKGROUND
We're particularly interested in professionals from Cybersecurity Consulting, GRC, Technology Risk, IT Audit, or Information Security Advisory teams within leading consulting firms, global system integrators, financial institutions, or large enterprises.
