Senior Security Compliance Consultant

We are seeking a Security Compliance Consultant with a strong technical security background and an excellent understanding of various compliance frameworks such as NIST, ISO 27001, SOC 2, CMMC 2.0, PCI-DSS, HITRUST, GDPR, and similar regulatory requirements. The consultant will be responsible for conducting thorough security assessments, ensuring our clients' systems and practices meet regulatory standards and providing recommendations for improvement.

• This is a Work from Home position

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

• Conduct Comprehensive Security Assessments: Evaluate client environments to assess adherence to compliance requirements (NIST, ISO 27001, SOC 2, CMMC 2.0, PCI-DSS, HITRUST, and GDPR).
• Client Engagement: Collaborate with clients across various industries and organizational levels, from technical teams to senior management, including CIOs. Conduct in-depth interviews to gather and analyze information on security practices and processes, assessing compliance readiness. Demonstrate exceptional technical knowledge and communication skills to convey complex security concepts effectively, tailoring insights and recommendations to meet the expectations of all stakeholders.
• Documentation & Reporting: Prepare detailed, accurate reports and recommendations based on assessment findings, presenting these in clear, actionable terms for clients.
• Develop Compliance Strategies: Work collaboratively with clients to develop strategies and action plans to address compliance gaps.
• Technical Validation: Ensure clients' security measures are robust enough to meet compliance requirements by evaluating technical controls and system configurations.
• Continuous Improvement: Stay updated on changes in compliance regulations and security best practices to provide current and proactive recommendations to clients.

• Technical Expertise: Strong background in IT security, with hands-on experience in security controls, risk assessments, and regulatory compliance frameworks.
• Excellent Communication Skills: Ability to conduct effective client interviews and explain complex security concepts in a clear, relatable way.
• Proficiency in Microsoft Office Suite: Advanced skills in Excel, Word, and PowerPoint for documenting assessments, compiling reports, and presenting findings.
• Attention to Detail: Strong analytical skills to detect nuances in compliance requirements and address them accurately.
• Personable & Professional: Friendly, approachable demeanor with the ability to build client trust and maintain professional relationships.

• Preferred Experience:
• Previous experience with security frameworks and standards, including NIST, ISO 27001, SOC 2, CMMC 2.0, PCI-DSS, HITRUST, and GDPR.
• Knowledge of security tools used in compliance testing and assessments.
• Certifications such as CISM, CISSP, CISA, or similar are highly valued
  

The starting salary for this role differs based on the employee's primary work location. Employees typically do not start at the top of the range, though compensation depends on each individual's qualifications.

Location Based Pay Ranges

$80,510 - $107,340 in these states: AR, ID, KY, LA, ME, MS, NE, SC, and SD.
$84,740 - $112,980 in these states: AZ, AL, FL, GA, IN, IA, KS, MO, MT, NM, ND, OH, OK, PA, TN, UT, VT, WV, WI, and WY.
$88,980 - $118,630 in these states: CO, HI, MI, MN, NV, NH, NC, OR, and RI.
$93,210 - $124,280 in these states: AK, CA, CT, DE, DC, IL, MD, MA, NJ, NY, TX, VA, and WA.

As with the pay range variety that's based on the region of a country, specific offers are determined by various factors such as experience, education, skills, certifications and other business needs.