Sr. Security Consultant - GRC

SHI International Corp.•US - TX - Home Office, TX

26d•$165,000 - $205,000•Remote

About The Position

We are seeking a Senior Security Consultant – GRC to join our growing cybersecurity advisory practice. This is a client-facing consulting role for an experienced, hands-on professional who can hit the ground running, lead engagements, and serve as a trusted advisor to clients. The ideal candidate will bring a strong consulting presence and the ability to translate complex security and regulatory requirements into practical, business-aligned outcomes. The ideal candidate will help develop governance models and security frameworks, deliver high-quality consulting services, and collaborate with Sales, Account Executives, Project Managers and other key stakeholders to support successful client outcomes. This individual will also identify opportunities for improvement, contribute to practice growth, stay current on industry trends, and mentor other consultants. We are looking for a proactive, polished, and business-minded consultant with strong client-facing skills, broad GRC experience, and the ability to contribute to both service delivery and practice expansion. This position is a remote position with Home Office setup as determined by SHI management.

Requirements

Completed Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or equivalent practical experience
7+ years of experience in governance, risk, compliance required
Experience in cybersecurity advisory or internal audit in a client-facing professional services environment highly preferred
Experience working for a cybersecurity services provider, consulting firm, advisory practice, or professional services organization
Ability to travel to SHI, Partner, and Customer Events up to 10%
Expertise in developing governance models, security frameworks, policies, standards, and operating procedures.
Proficiency in implementing and managing cloud security frameworks, compliance standards, and governance models
Familiarity with GRC platforms and tools such as ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust, or similar solutions.
Ability to oversee and direct projects to completion, ensuring goals are met, resources are utilized efficiently, and stakeholders are satisfied
Ability to examine, clean, transform, and model data to discover useful information, draw conclusions, and support decision-making
The ability to effectively utilize applications like Word, Excel, PowerPoint, and Outlook to enhance productivity and perform various tasks efficiently.
Practical experience in GRC advisory services, including security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews.
Working knowledge of common frameworks and standards such as NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA.

Nice To Haves

Relevant industry certifications strongly preferred such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor

Responsibilities

Serve as a trusted advisor to clients on GRC, cybersecurity governance, and security program maturity.
Lead and deliver client-facing consulting engagements independently, ensuring high-quality outcomes and alignment to client objectives.
Conduct security assessments across governance, risk, compliance, and control effectiveness, aligned to industry frameworks and regulatory requirements.
Facilitate risk assessments and tabletop exercises, including enterprise, cyber, third-party, and incident response scenarios for technical and executive stakeholders.
Develop governance models, security frameworks, data governance blueprints, policies, standards, and operating procedures.
Support clients with internal audit readiness, compliance reporting, evidence validation, remediation planning, and issue tracking.
Collaborate with sales, technical teams, and peer practice leaders to identify client needs, recommend solutions, and support successful delivery.
Contribute to practice growth by improving methodologies, staying current on industry trends, optimizing cross-practice capabilities, and mentoring other consultants.