[Hiring] Lead Security Solutions Consultant - Cyber Risk and Strategy @World Wide Technology

Role Description

The Lead Cyber Risk and Strategy Consultant is a senior individual contributor who owns complete delivery workstreams within WWT’s Governance, Risk, Strategy and Compliance practice. Positioned above the Senior Consultant, the Lead Consultant brings broad GRC domain depth, independently drives complex client work, and serves as a trusted advisor to client stakeholders while guiding the delivery team toward high-quality outcomes.

The Lead Consultant is accountable for translating client objectives into structured delivery plans, leading assessments and workshops, shaping practical recommendations and roadmaps, and ensuring workstream outputs meet WWT’s professional services standards. They work in partnership with Principals and Senior Managers, provide day-to-day direction and coaching to Senior Consultants and Consultants, and contribute meaningfully to pursuits, solution shaping, and practice development.

Qualifications

• 7–12 years of experience in cybersecurity, IT risk, compliance, or security advisory with a clear focus on GRC; must include significant hands-on experience across at least three GRC domains and demonstrated ownership of client-facing workstreams
• Advanced hands-on experience across GRC domains and platforms, including multiple areas such as:
  • Risk Management — enterprise and IT risk assessments, risk methodology design, risk register governance, risk appetite and tolerance, qualitative or FAIR-based quantification, treatment planning, KRI design, and executive risk reporting
  • Compliance Program Management — complex regulatory and framework gap assessments, controls mapping, audit and certification readiness, evidence and remediation governance, and sustainable compliance operating models across frameworks such as SOC 2, ISO 27001, FedRAMP, HIPAA, PCI DSS, DORA, or SOX ITGC
  • Policy & Control Governance — enterprise policy and standards development, control framework design and rationalization, control testing methodology, exception governance, control ownership models, and integration of NIST, CIS, ISO, or similar frameworks
  • Third-Party & Vendor Risk — program design, vendor segmentation and tiering, inherent and residual risk methods, assessment and contractual control review, issue remediation, ongoing monitoring, and governance reporting
  • GRC Platforms — ServiceNow GRC, Archer, OneTrust, Vanta, Drata, or equivalent: experience translating process requirements into workflows, data models, reporting, dashboards, assessment structures, or platform-enabled operating processes
• Strong working knowledge of GRC and security frameworks: NIST CSF 2.0, NIST SP 800-53, NIST RMF, ISO 27001/27002, CIS Controls v8, SOC 2 Trust Services Criteria, COBIT, PCI DSS v4, HIPAA Security Rule, SOX ITGC, FedRAMP, and DORA
• Advanced understanding of core GRC concepts: risk appetite and tolerance, control design and operating effectiveness, three lines of defense, audit lifecycle, regulatory change management, data privacy principles, governance operating models, and risk-based prioritization
• Demonstrated consulting leadership competencies, including:
  • Structured discovery: ability to design and lead current-state discovery across multiple stakeholder groups, identify information gaps, challenge assumptions constructively, and synthesize complex evidence into a coherent view of risk and program maturity
  • Gap analysis: experience leading maturity and control assessments, calibrating findings, determining root causes, prioritizing gaps by risk and business impact, and converting analysis into practical recommendations and roadmaps
  • Executive and technical communication: ability to translate complex risk and compliance topics into clear written deliverables, presentations, and verbal recommendations for technical teams, business stakeholders, project sponsors, and senior leaders
  • Workshop facilitation: ability to independently plan and facilitate discovery sessions, risk workshops, prioritization discussions, and working groups; manage differing viewpoints and guide stakeholders toward decisions and next steps
  • Deliverable leadership: consistent track record of owning high-quality client deliverables from analysis through final presentation, including quality review of team outputs and accountability for consistency, clarity, and defensibility
  • Engagement leadership: direct day-to-day workstream execution, coordinate team activities, manage dependencies and delivery risks, mentor junior staff, and partner effectively with the engagement lead to maintain scope, quality, and client confidence

Requirements

• Bachelor’s degree in Information Security, Risk Management, Business, or a related field
• Industry certifications demonstrating advanced GRC or security knowledge: CISSP, CISM, CISA, CRISC, CGEIT, GRCP, or equivalent; platform certifications from ServiceNow, OneTrust, or Archer are a strong plus
• Experience leading GRC work in complex enterprise environments across financial services, healthcare, retail, manufacturing, or public sector, particularly where compliance intersects with significant regulatory scrutiny
• Substantial consulting experience at a professional services firm, systems integrator, audit/advisory firm, or equivalent client-facing role, including responsibility for workstream leadership and client presentations
• Experience supporting pre-sales and solution shaping, including discovery, SOW development, effort estimation, staffing models, proposal creation, and transition from pursuit to delivery

Benefits

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program