[Hiring] Senior Security Consultant @SHI International Corp.

Role Description

• Serve as a trusted advisor to clients on GRC, cybersecurity governance, and security program maturity.
• Lead and deliver client-facing consulting engagements independently, ensuring high-quality outcomes and alignment to client objectives.
• Conduct security assessments across governance, risk, compliance, and control effectiveness, aligned to industry frameworks and regulatory requirements.
• Facilitate risk assessments and tabletop exercises, including enterprise, cyber, third-party, and incident response scenarios for technical and executive stakeholders.
• Develop governance models, security frameworks, data governance blueprints, policies, standards, and operating procedures.
• Support clients with internal audit readiness, compliance reporting, evidence validation, remediation planning, and issue tracking.
• Collaborate with sales, technical teams, and peer practice leaders to identify client needs, recommend solutions, and support successful delivery.
• Contribute to practice growth by improving methodologies, staying current on industry trends, optimizing cross-practice capabilities, and mentoring other consultants.

Qualifications

• Expertise in developing governance models, security frameworks, policies, standards, and operating procedures.
• Proficiency in implementing and managing cloud security frameworks, compliance standards, and governance models.
• Familiarity with GRC platforms and tools such as ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust, or similar solutions.
• Ability to oversee and direct projects to completion, ensuring goals are met, resources are utilized efficiently, and stakeholders are satisfied.
• Ability to examine, clean, transform, and model data to discover useful information, draw conclusions, and support decision-making.
• The ability to effectively utilize applications like Word, Excel, PowerPoint, and Outlook to enhance productivity and perform various tasks efficiently.
• Practical experience in GRC advisory services, including security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews.
• Working knowledge of common frameworks and standards such as NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA.

Requirements

• Completed Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or equivalent practical experience.
• 7+ years of experience in governance, risk, compliance required.
• Experience in cybersecurity advisory or internal audit in a client-facing professional services environment highly preferred.
• Experience working for a cybersecurity services provider, consulting firm, advisory practice, or professional services organization.
• Ability to travel to SHI, Partner, and Customer Events up to 10%.
• Relevant industry certifications strongly preferred such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor.

Benefits

• Medical, vision, dental, 401K, and flexible spending.