SECURITY AND COMPLIANCE CONSULTANT

We are seeking a proactive, articulate, and client-focused Security and Compliance Consultant to partner with organizations in designing, managing, and implementing comprehensive Governance, Risk, and Compliance (GRC) programs. This role requires strong verbal communication skills and the ability to confidently interact with clients on video calls.
As a Security and Compliance Consultant, you will guide clients through complex frameworks, including NIST 800-53, SOC 2, ISO 27001, FedRAMP, and other regulations like GDPR and HIPAA. You will play a key role in preparing clients for third-party certifications, ensuring long-term compliance, and maturing security posture.

Our consultants specialize in the following key areas:

• IT Compliance Frameworks & Certifications (SOC 2, ISO 27001, NIST 800-53, FedRAMP, HIPAA, GDPR, CCPA)
• Governance, Risk, and Compliance (GRC)
• Information Security & Risk Management
• Cybersecurity Best Practices & Regulatory Requirements
• Audit Readiness & Continuous Compliance
• Data Privacy & Security Policies

CLIENT TRAINING AND EDUCATION

• Educate clients on the certification process, including key milestones, deliverables, and expectations.
• Conduct training sessions to ensure client teams are equipped with the knowledge and skills needed to maintain compliance.

REQUIRED QUALIFICATIONS:

• Exceptional verbal communication skills and ability to present confidently on video calls.
• Deep understanding of compliance frameworks such as NIST CSF, SOC 2, ISO 27001, and knowledge of privacy laws such as GDPR and CCPA.
• Experience with enterprise security architectures, risk management, and compliance.
• Strong ability to work independently in a remote environment.

DESIRED QUALIFICATIONS FOR SECURITY AND COMPLIANCE CONSULTANT:

• Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer.
• Bachelor’s degree in information technology, cybersecurity, or a related field.
• Extensive knowledge of the NIST 800-53.
• Extensive knowledge of SOC 2 Trust Services Criteria.
• Extensive knowledge of ISO 27001 standards.
• Extensive understanding of HIPAA/HITECH Security Rule.
• Demonstrated experience in performing security and privacy risk assessments.
• Demonstrated experience in performing compliance assessments and implementing regulatory requirements.
• Demonstrated experience in writing policies, procedures, and other documentation within various information security frameworks.