Senior GRC Risk Advisory Consultant - Remote (USA)

Echelon Risk + Cyber•Washington D. C., DC

1d•Remote

About The Position

Echelon Risk + Cyber is hiring a Senior GRC Risk Advisory Consultant to support and lead cybersecurity Risk Advisory client engagements. The consultant will plan and execute assessment work, develop client deliverables and internal processes, and help clients strengthen their cybersecurity maturity. The role includes advising client leadership, assessing security controls and risks, developing policies and incident-response materials, and communicating findings. The position is remote from anywhere in the United States. The consultant will also contribute to business development, internal methodologies, thought leadership, and the cybersecurity community. The role calls for a proactive, articulate professional who can manage client relationships and multiple engagements, mentor junior consultants, and adapt to changing priorities. Applicants must be authorized to work in the United States without current or future visa sponsorship.

Requirements

At least 5 years of related experience in the cybersecurity industry.
Experience focused on governance, risk, and compliance planning, development, and management.
Knowledge of GRC platforms and tools used for assessments and compliance management.
Risk management experience, including conducting assessments and audits, designing information-security controls and processes, and evaluating and prioritizing risk.
Experience with information-security frameworks and best practices, such as CIS, NIST, PCI, CMMC, ISO, GLBA, FFIEC, SOX, SOC, HIPAA, or HITRUST.
Ability to lead engagements from scoping through delivery and manage client expectations, timelines, and deliverables.
Ability to manage and prioritize multiple projects and adapt to a changing environment.
Strong attention to detail and analytical, technical, and problem-solving skills.
Excellent verbal and written communication skills, including the ability to craft professional messages and adapt communication to the audience.
Authorization to work in the United States without current or future visa sponsorship.

Nice To Haves

Experience with incident response, business continuity, and disaster recovery planning.
Project management experience.
Advisory knowledge of cloud systems, applications, security services and tools (such as EDR, MDR, SIEM, vulnerability scanning, email security, backup and disaster recovery, and MDM), firewalls, basic networking, data security, and IAM/SSO.
Experience working with financial services, healthcare, or other regulated industries.
Bachelor's degree in a relevant IT or cybersecurity major.
Strong background in audit, assurance, or serving as an assessor.
CISSP, CISA, CISM, or similar certification.
Client-facing experience and demonstrated ability to manage multiple projects simultaneously.

Responsibilities

Plan, scope, execute, and report cybersecurity risk and maturity assessments using frameworks such as NIST CSF, ISO 27001, SOC 2, and CMMC.
Collaborate with IT management and client leadership to develop roadmaps for improving cybersecurity maturity.
Develop and maintain cybersecurity policies and procedures for clients.
Review and assess security and technology controls against cybersecurity best practices and compliance frameworks.
Work with clients to develop incident response plans and playbooks suited to their environments and needs.
Document assessment results, prepare client reports, and communicate findings to client management and stakeholders.
Create client-facing presentations, reports, and analytics.
Assist leadership with proposals, budgets, work plans, and other business development activities.
Build and maintain strong internal and client relationships through effective communication.
Regularly produce cybersecurity thought leadership for the organization's website blog.
Participate in the cybersecurity community by attending or speaking at local or national conferences.
Lead engagements from scoping through delivery, including managing client expectations, timelines, and deliverables.
Provide strategic guidance on tabletop exercises, incident preparedness, and resilience.
Mentor junior consultants and contribute to internal methodologies and best practices.
Manage and prioritize multiple projects while adapting to a demanding and changing environment.

Benefits

Medical, dental, and vision insurance through Cigna, with the employer covering most of the employee cost.
Employer funding for HSA accounts and access to an FSA.
401(k) through Vanguard with a guaranteed employer contribution.
Flexible vacation policy.
11 holidays, with flexibility based on individual needs.
Family-friendly leave, including maternity leave and leave for non-birthing parents.
Employer-paid short-term and long-term disability insurance.
Employer-paid life insurance, with access to additional life insurance and hospital and accidental coverage.
Discounted mental health support.
Support for individual development through certifications, continued learning, and conferences.