Nearshore Cyber is seeking a mid-level Security Consultant to work on Cybersecurity, Risk, and Compliance consulting services. The ideal candidate has a minimum of 5 years of experience and strong communication skills.
Requirements
- Participate in Cybersecurity, Information Security, Risk, Compliance, and/or Data Privacy Programs or Projects
- Compliance framework mapping and implementation
- Regulatory mapping and implementation
- Advisory-side, risk, or regulatory remediation management
- Risk, Compliance, or Information Security risk reporting and monitoring
- Creation of roadmaps to mature or advance Risk, Compliance, and Information Security Strategies/Programs/Controls
- Design and enablement of cyber controls functions and processes
- Change management related to regulatory adoption or compliance changes
- Audit or certification readiness
- Assist with GRC (Governance, Risk, and Compliance) related tasks and projects
- Work with GRC/Cybersecurity solutions, tools, and technologies
- Design or mature controls for technical areas such as Software Development, Identity and Access Management, Business Continuity and Resiliency, Cloud
- Apply industry-specific regulations, laws, and standards such as SOC 2, ISO 27001, CMMC / NIST 800-171, NIST 800-53, CCPA/CPRA, HIPAA, PCI
- Serve as an internal auditor on client audit preparation
- Coordinate and advise clients through external audits
- Continuously learn from senior consultants to develop expertise and advance within the role
Benefits
- Generous Paid Time Off
- 401k Matching
- Retirement Plan