[Hiring] GRC Senior Consultant (vCISO) @Echelon Risk + Cyber

Role Description

At Echelon Risk + Cyber, we are looking for an exceptional Senior Consultant for our growing vCISO Practice. This individual will lead and deliver client engagements, quality-review the work of the broader team, and help build the processes that support Echelon's continued growth.

• Lead client engagements and initiatives.
• Own and manage defined portions of client initiatives, including scope, timeline, dependencies, status reporting, and delivery of key deliverables.
• Conduct client discoveries and onboarding of services, including client interviews, discovery and assessment plans, evidence requests, and review of documentation and supporting evidence.
• Plan, coordinate, and manage cybersecurity and compliance programs using strong project management and communication techniques.
• Proactively identify and address project risks, scope changes, and client dependencies before they affect delivery.
• Facilitate workshops and advise senior stakeholders.
• Communicate complex security and compliance topics clearly to senior client stakeholders.
• Work with clients to identify information security risks and challenges and provide actionable, right-sized recommendations.
• Represent Echelon in high-level client discussions.
• Review and assess security and technology controls against cybersecurity best practices and compliance frameworks.
• Develop and maintain cybersecurity policies and procedures.
• Perform quality assurance review of team deliverables for accuracy, completeness, consistency, and adherence to Echelon standards.
• Document results, create client reports, and communicate findings to client management and other stakeholders.
• Create client-facing presentations and executive-level reporting.
• Take ownership of proposals, statements of work, budgets, and work plans.
• Identify new growth opportunities within client accounts and partner with leadership to act on them.
• Help build and improve Echelon's internal processes, templates, and methodologies.
• Provide guidance, coaching, and feedback to junior team members.
• Manage multiple simultaneous client engagements and priorities while delivering quality results on time.
• Create and execute a formal plan for personal growth marketing.
• Engage in the cybersecurity community by attending or speaking at local or national conferences.

Qualifications

• 5+ years of related experience in the cybersecurity industry, with a focus on governance, risk, and compliance planning, development, and management.
• Demonstrated experience leading client-facing work, such as facilitating workshops and owning deliverables.
• Experience reviewing the work of others and providing constructive feedback.
• Risk management experience, including performing assessments and recommending risk mitigation strategies.
• Depth of expertise across multiple information security frameworks and best practices.
• Knowledge of GRC platforms and tools that support assessments and compliance management.
• Excellent verbal and written communication skills.
• Ability to manage and prioritize multiple projects simultaneously.
• Strong attention to detail and superior analytical, technical, and problem-solving skills.
• Working knowledge of cloud systems, applications, and security tools and services.
• Preferred experience working with financial services, healthcare, or other regulated industries.
• Degree in Information Systems, Computer Science, Information Security, or a related discipline preferred.
• Preferred certifications: CISSP, CISA, CISM, or similar.
• Intellectual curiosity, with a willingness to learn and develop.
• Applicants must have authorization to work in the United States without current or future visa sponsorship.

Benefits

• Access to medical, dental, and vision insurance through Cigna, with the majority of the employee cost covered by the employer.
• Employer funding to HSA accounts and FSA access.
• Access to a 401(k) through Vanguard with a guaranteed employer contribution.
• Flexible vacation policy that allows you to manage your schedule and rest and recharge when you need to.
• 11 holidays with flexibility based on what is important for you and those you love.
• Family-friendly benefits, including maternity leave, non-birthing parent leave, employer-paid short-term and long-term disability, and more.
• Support for individual development through certifications, continued learning, conferences, and more.