Security GRC - Cybersecurity Risk Advisor

ECI

5d • $120,000 • Remote

About The Position

As a Cybersecurity Risk Advisor supporting clients across the United States, United Kingdom, European Union, and Asian Pacific regions, you will help strengthen the cybersecurity posture of financial institutions and government clients. You will work with client leadership to assess risk, implement security frameworks, and support compliance with regional regulatory standards, including NIST CSF 2.0, CMMC, GDPR, and the Data Protection Act 2018. You will also contribute to security strategies that align with global best practices and local regulatory expectations.

ECI is a global provider of managed services, cybersecurity, and business transformation for mid-market financial services organizations. The company serves more than 1,000 customers worldwide, which have over $3 trillion in assets under management.

Requirements

• Excellent communication and presentation skills, including the ability to engage senior stakeholders and varied audiences and explain complex topics in business terms.
• Strong understanding of international regulatory frameworks.
• Familiarity with global standards such as ISO 27001, NIST CSF, CIS Controls, and COBIT.
• Proven experience conducting security assessments, audits, and risk analyses.
• Self-motivated and adaptable, with the ability to work independently on tasks and projects.
• Bachelor’s degree in a relevant field such as Computer Science, Information Technology, or Cybersecurity, or an equivalent combination of education and professional experience.
• Typically 4+ years in information security, IT operations, or a related technical role.

Nice To Haves

• Experience in cybersecurity, IT risk, or compliance, preferably within the financial services sector.
• Industry certifications such as CISSP, CISM, CRISC, or CCSP.
• Previous MSP/MSSP experience.
• Technical knowledge of IT systems and security controls, such as Microsoft, Cisco, endpoint protection, and IAM.
• Strong familiarity with and understanding of O365 admin center.

Responsibilities

• Build relationships with clients as a trusted cybersecurity advisor.
• Develop and implement cybersecurity risk management strategies tailored to financial services and government clients in various regions.
• Advise clients on compliance with regulatory frameworks and global standards such as ISO 27001, NIST, and CIS.
• Conduct security assessments and gap analyses to identify weaknesses and recommend actionable improvements.
• Collaborate with client stakeholders, including CISOs and IT leadership, to align cybersecurity initiatives with business objectives.
• Stay current with evolving cyber threats, regulatory updates, and industry trends across regions.
• Support clients during internal and external audits, including documentation preparation and remediation planning.
• Collaborate with team members and contribute to the continuous improvement of internal methodologies and knowledge sharing.
• Respond to ad hoc client queries related to cybersecurity, risk, and compliance.
• Travel within the US region up to 15% as required.
• Perform other duties as assigned.

Benefits

• Competitive compensation package, with a maximum range of $120,000 annually depending on experience and location, plus variable compensation.
• Flexible PTO.
• Health benefit eligibility beginning the first of the month.
• Life insurance.
• Pet insurance.
• 401K.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior