Senior Technical Consultant - Security GRC

Lead complex security GRC engagements independently, ensuring analytical and advisory quality from scoping through knowledge transfer.

Design, assess, and rationalize multiple overlapping frameworks including NIST CSF, NIST SP 800-53, 800-171, CIS Controls, CRI Profile, and ISO/IEC 27001 into coherent client-operable controls and evidence models.

Manage stakeholder engagement and workshops, defend commercial-grade deliverables, and produce quantified risk positions for executive and audit review.

5+ years of security GRC, risk, audit, or control assurance experience with substantial consulting or professional services client-advisory exposure.

Bachelor’s degree in a relevant field or equivalent experience.

Expert working knowledge and application of NIST CSF, NIST SP 800-53, NIST SP 800-171, CIS Controls, CRI Profile, and ISO/IEC 27001 frameworks.

Highly proficient executive-level written and spoken English; able to produce precise, concise, defensible deliverables under time pressure.

Experienced in managing senior stakeholders and facilitating workshops on complex, multi-framework security GRC problems with limited supervision.

Demonstrates advanced judgment in risk quantification and translating technical controls into business risk communications for boards, CISOs, and risk committees.

Skilled consultant able to scope ambiguous projects, drive decisions, and transfer capability effectively to client teams.