Cybersecurity Consultant - Governance, Risk, and Compliance

GO SECURITY PRO•Tulsa, OK

1d•$60,000 - $90,000•Hybrid

About The Position

Go Security Pro is seeking to add a full-time cybersecurity consultant for our Governance, Risk, and Compliance (GRC) consulting practice. The ideal candidate will have a technical background, with real-world IT departmental experience, who is already in cybersecurity or interested in moving into cybersecurity. In this role, you will participate in a variety of projects with clients across industries, gain valuable insights on a new cybersecurity career path, and stay on the cutting edge of technology to provide high-quality risk management services. As training is one of our core values, we invest in our employees. This position will be an excellent opportunity for career growth, working alongside our risk management team with deep cybersecurity risk management experience that they’re eager to share with you. We expect our employees to work hard, meet established performance benchmarks, maintain a high level of professionalism, and be a team player. This position is not fully remote. While the role is centered in Tulsa, Oklahoma, candidates within approximately two hours of driving distance (including Oklahoma City, Northwest Arkansas, and nearby areas) may be considered, with an expectation of regular onsite presence as business needs require. Minimal travel required, up to 25%.

Requirements

At least one (1) year minimum prior work experience within or adjacent to an enterprise IT departmental role.
Bachelor's or associate’s degree in a technical subject matter.
Aptitude for quickly learning.
Strong work ethic.
Proof of your right to work in the U.S., as required by law.
Signing our confidentiality and nondisclosure agreement as well as acknowledgement of receipt of all company policies.
Reference Checks.

Nice To Haves

Technical background, with real-world IT departmental experience, who is already in cybersecurity or interested in moving into cybersecurity.
Experience in a large enterprise IT department.
Experience in multiple different areas of IT.
Experience in a highly standardized or regulated IT environment, including compliance requirements such as NIST, HIPAA, CMMC, FTC Safeguards, and PCI DSS.
Exposure to cybersecurity or audit practices from an IT role.
Relevant IT and security certifications are preferred.
Personal connection to Oklahoma.

Responsibilities

Participate in and eventually lead highly technical configuration security hardening reviews, serve as an advisor to our clients, and leverage valuable technical experience in determining client-specific recommendations to resolve risks.
Assist with, provide technical expertise for, and grow to lead risk assessments (client or third-party) and audits.
Evaluate complex and unique client environments for a variety of consulting needs.
Develop security program documentation (e.g., policies and procedures) for clients across industries.
Strong communication skills with the ability to lead face-to-face meetings with clients, manage customer relationships, and maintain high customer satisfaction, while always maintaining professionalism.
Strong writing skills for delivering impactful reports to clients. Writing is an essential function of this role, including drafting assessment reports, accurately capturing risk details, creating actionable recommendations, and drafting cybersecurity plans for clients. Audiences for our deliverables include both IT personnel and non-technical business leadership, and our written deliverables accommodate both audiences.
Strong project management skills, including effectively identifying and communicating needs for project success, project obstacles and project risks.
Work on many projects simultaneously, while ensuring project objectives are delivered on time and meet company and client expectations for quality.
Thrive and learn from on-the-job training/shadowing, writing sessions, and collaborative editing processes.
Provide support in other areas of consulting including incident response, technical testing, systems configurations, public speaking, webinar participation, blog content development, and sales assistance.
Maintain a professional demeanor that helps elevate the corporate brand.
Quickly obtain cybersecurity certifications.