Security GRC - Cybersecurity Risk Advisor

Position Responsibilities

• Create a relationship with clients as a trusted cybersecurity advisor.
• Develop and implement cybersecurity risk management strategies tailored to the needs of financial services and government clients in various regions.
• Advise clients on compliance with regulatory frameworks and global standards like ISO 27001, NIST, and CIS.
• Conduct security assessments and gap analyses to identify weaknesses and recommend actionable improvements.
• Collaborate with client stakeholders, including CISOs and IT leadership, to align cybersecurity initiatives with business objectives.
• Stay current with evolving cyber threats, regulatory updates, and industry trends across various regions.
• Support clients during internal and external audits, including preparation of documentation and remediation planning.
• Collaborate with team members and contribute to the continuous improvement of internal methodologies and knowledge sharing.
• Respond to ad hoc client queries related to cybersecurity, risk, and compliance.
• Travel within the US region up to 15% as required.
• Other duties as assigned.

Position Requirements

• Excellent communication and presentation skills, with the ability to engage senior stakeholders and varied audiences and explain complex topics in business terms.
• Strong understanding of international regulatory frameworks.
• Familiarity with global standards such as ISO 27001, NIST CSF, CIS Controls, and COBIT.
• Proven experience conducting security assessments, audits, and risk analyses.
• Self-motivated, adaptable, and capable of working independently on tasks and projects.
• Bachelor’s degree in a relevant field such as Computer Science, Information Technology, Cybersecurity or equivalent combination of education and professional experience, typically 4+ years in information security, IT operations, or a related technical role.

Preferred Qualifications

• Experience in cybersecurity, IT risk, or compliance, preferably within the financial services sector.
• Industry certifications such as CISSP, CISM, CRISC, or CCSP
• Previous MSP/MSSP experience.
• Technical knowledge of IT systems and security controls (e.g., Microsoft, Cisco, endpoint protection, IAM, etc.).
• Strong familiarity with and understanding of O365 admin center.

Working Conditions