Experienced Senior Consultant, Cybersecurity

BDO • Chicago, IL

88d • $90,000 - $100,000

About The Position

The Experienced Senior Cybersecurity and Compliance Advisor is involved in assisting BDO's clients with IT compliance, cybersecurity and multiple governance/controls frameworks that may be applicable to the organization. The Experienced Senior participates on security assessments and identifies and evaluates business and technology risks and controls to help companies with compliance and security to applicable frameworks, along with providing possible solutions for the mitigation of risks and/or continuous improvement with security. This position may also assist clients implement compliance, security, or governance programs and develops assessment reports, including observations and possible solutions.

Requirements

• Bachelor's degree with a focus in Computer Science, Information Security, Accounting, or Finance, required
• Two (2) or more years of experience in IT controls, Cyber (NIST or CIS), HIPAA, PCI, or security compliance, required
• Prior experience working within a national consulting organization or professional services, preferred
• One (1) or more years of experience working on large, complex projects, preferred
• Any security certifications such as CISA, CISM, CISSP, or other certifications, preferred
• AWS Cloud Practitioner or Microsoft 365 Certified, preferred
• Proficient in the use of Microsoft Office Suite, including Office 365, OneDrive, SharePoint and Visio, required
• Experience with AWS, Google Virtual Private Cloud, preferred
• Multilingual capabilities (read, speak and/or write), preferred

Nice To Haves

• Experience working within a national consulting organization or professional services
• One (1) or more years of experience working on large, complex projects
• Any security certifications such as CISA, CISM, CISSP, or other certifications
• AWS Cloud Practitioner or Microsoft 365 Certified
• Experience with AWS, Google Virtual Private Cloud
• Multilingual capabilities (read, speak and/or write)

Responsibilities

• Participates and takes an active role in project tasks applicable to HIPAA, NIST CSF, PCI, data security, compliance and governance frameworks, security vendor assessments and IT controls assessments
• Conducts and assesses compliance and governance requirements based on standard programs to assist the organization in meeting business needs
• Identifies and evaluates business and technology risks to assist with possible options to mitigate risks
• Works to understand the clients' business environment and risk management frameworks and approaches
• Recognizes technical issues or possible areas of concern and reports those internally and to the client once validated
• Documents interviews and meetings and captures action items, next steps and risks
• Develops assessment and 'gap' reports, including observations and possible solutions
• Prepares presentations for client meetings
• Participates in remediation planning and outlines client requirements applicable to frameworks such as PCI, ISO, NIST, HIPAA, and CIS
• Develops and maintains relationships with client personnel
• Budgets time and assists with multiple project requests simultaneously, as well as monitors project tasks and risks
• Travels, as necessary
• Other duties as required

Benefits

• Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate's qualifications, experience, skills, and geography.

What This Job Offers

• Career Level: Senior
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree