Information Security Consultant

4 months, 3 weeks ago
Full-time
Senior
Cybersecurity
hatch I.T.

hatch I.T.

hatch I.T. is a specialized technology recruiting firm that supports emerging tech startups in growing their engineering, data, and product teams. They focus on candidate-centric recruiting, bridging the gap between startups and the local tech communit...

Professional Services
11-50
Founded 2012

Description

  • Provide CISO-level advisory guidance to Assura clients.
  • Oversee and mentor Virtual ISOs delivering day-to-day GRC work.
  • Review client deliverables for accuracy, completeness, and practical applicability.
  • Serve as the senior escalation point for complex client questions.
  • Translate regulatory and technical requirements into clear, actionable guidance.
  • Support scope expansion discussions when new client needs emerge.
  • Help improve Assura’s GRC methodologies, templates, and service offerings.
  • Build client confidence through executive-level communication and advisory support.

Requirements

  • Strong experience with NIST frameworks, including 800-53, 800-171, and CSF.
  • SEC 530 familiarity (Virginia Information Security Standard) is strongly preferred.
  • Prior consulting or advisory experience.
  • Ability to communicate confidently with executives and boards.
  • Excellent writing and documentation skills.
  • Technical literacy sufficient to advise on controls without implementing them.
  • ISO, HIPAA, and PCI exposure is preferred.
  • SLED experience outside Virginia is preferred.
  • Familiarity with GRC tools such as Trastero is preferred.
  • Experience mentoring junior practitioners is preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Professional Services Technical Architect - Security

GitLab 1K-5K Internet Software & Services

GitLab is hiring a Senior Professional Services Technical Architect, Security to design and lead secure enterprise DevSecOps solutions for Professional Services clients across AMER, from pre-sales scoping through implementation and enablement.

Ansible CI/CD DevSecOps GitLab Jenkins SonarQube Terraform
8 hours, 47 minutes ago

Lead Security Engineer - Penetration Testing & AI Security

HighLevel 251-1K Internet Software & Services

HighLevel is seeking a Lead Security Engineer to secure its SaaS platform and AI-enabled products through application security leadership, secure development practices, and adversarial testing of AI systems.

Bash CI/CD Cybersecurity DevSecOps Docker Go JavaScript JWT Kubernetes Microservices OpenID Connect OWASP Penetration Testing Python SAML
3 days, 10 hours ago

Principal Consultant - ICS/OT Cybersecurity

Dragos 251-1K Professional Services

Dragos is seeking a Singapore-based Principal Consultant to lead high-impact OT/ICS cybersecurity engagements and shape long-term security strategies for critical infrastructure organizations across APAC.

Cybersecurity SIEM
6 days, 9 hours ago

Cybersecurity, Incident Response & Hands-On Training Contract IT Instructor (Onsite and virtual live classes) (copy)

Pluralsight 1K-5K Internet Software & Services

Pluralsight is seeking independent contract cybersecurity instructors and scenario developers worldwide to deliver remote and onsite incident-response training, tabletop exercises, and Capture the Flag events for enterprise clients.

Bash Burp Suite Cybersecurity Docker Metasploit Penetration Testing Python Splunk Wireshark
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers