Grc Consultant Jobs

About The Position

Requirements

• Minimum of seven years of experience in an information technology-related position, with three or more years of cybersecurity experience preferred.
• Previous experience leading cybersecurity compliance consulting or assessment engagements.
• Experience managing multiple concurrent client engagements, projects, or priorities.
• Experience leading executive-level client meetings and presenting technical or compliance information to senior leadership.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or a related field preferred. Equivalent professional experience may be considered in lieu of a degree.
• Strong understanding of enterprise IT infrastructure, cybersecurity technologies, and security architecture.
• Experience interpreting and applying cybersecurity compliance frameworks, particularly NIST SP 800-171, CMMC, and DFARS.
• Ability to confidently lead highly technical discussions with executive and technical stakeholders.
• One or more of the following certifications: CCA, CISSP, CISM.
• Excellent communication skills with the ability to engage executives, technical teams, and business stakeholders.
• Strong analytical and problem-solving skills with sound professional judgment.
• Ability to manage multiple client engagements while maintaining exceptional quality and responsiveness.
• Demonstrated leadership through mentoring, collaboration, knowledge sharing, and technical guidance.
• Organized, accountable, and capable of working independently in a fast-paced consulting environment.
• Committed to continuous learning, professional development, and maintaining technical expertise.

Nice To Haves

• Experience supporting organizations through CMMC assessments or ongoing CMMC compliance programs.
• Experience with NIST SP 800-171 and DFARS.
• Experience supporting organizations within the Defense Industrial Base.
• Experience working for a C3PAO, Registered Provider Organization (RPO), cybersecurity consulting firm, or MSSP.
• Experience working with Microsoft 365 Commercial, GCC, or GCC High environments.
• Experience with Microsoft Entra ID, Active Directory, and Microsoft Intune.
• Experience conducting risk assessments, tabletop exercises, and mock assessments.

Responsibilities

• Lead cybersecurity compliance consulting engagements for assigned clients from planning through delivery.
• Serve as the primary advisor for executive and technical client stakeholders regarding cybersecurity risk, compliance, and implementation strategies.
• Conduct compliance assessments, gap assessments, risk assessments, tabletop exercises, mock assessments, and related consulting engagements.
• Review security architectures, technical implementations, policies, procedures, and evidence to determine compliance with applicable cybersecurity requirements.
• Develop practical remediation plans and implementation guidance that help clients achieve and maintain compliance.
• Prepare and review professional reports, executive presentations, and other client deliverables.
• Mentor GRC Analysts and GRC Consultants while contributing to the continuous improvement of MAD Security's consulting methodologies and delivery standards.

Benefits

• Safeguarding Businesses from Evil
• strengthen their cybersecurity posture through practical consulting, managed security services, and compliance expertise that deliver measurable business value
• working alongside experienced cybersecurity professionals who are passionate about high standards, continuous improvement, and delivering exceptional service
• opportunity to solve challenging cybersecurity problems
• work directly with executive leadership across a diverse client base
• mentor other professionals
• play a meaningful role in helping organizations achieve and maintain cybersecurity compliance