Senior Risk Advisory Consultant - Remote (Mexico)

Echelon Risk + Cyber; Xico; Remote; MXN 600,000 - 900,000; Full time

Benefits offered by this job

Private medical insurance

Life insurance

Technology stipend

8% retirement contribution

Flexible vacation

Parental leave

Certifications support

Job summary

Echelon Risk + Cyber is seeking a Senior Risk Advisory Consultant to lead and execute cybersecurity risk assessments, craft client deliverables, and help shape internal processes. This remote role can be done from anywhere in Mexico.

You will collaborate with IT leadership to build roadmaps, develop incident response plans, and run tabletop exercises, while producing client reports and mentoring junior consultants.

Qualifications

• 5+ years of experience in cybersecurity risk advisory or related field.
• Experience with frameworks such as NIST CSF, ISO 27001, SOC 2, and CMMC is preferred.
• Ability to lead engagements from scoping through delivery and manage client expectations.

Responsibilities

• Assist in planning, scoping, executing, and reporting cybersecurity risk assessments against leading frameworks.
• Collaborate with client leadership to develop roadmaps for improved maturity and controls.
• Develop and maintain cybersecurity policies and incident response plans and playbooks.
• Lead tabletop exercise engagements and communicate results to stakeholders.
• Create client-facing presentations, reports, and analytics.

Skills

Governance

Risk Assessment

Incident Response

Cloud Security

NIST

ISO 27001

Education

Bachelor's Degree in IT or Cybersecurity

Tools

GRC Tools

CISSP/CISA/CISM

Job description

About us: At Echelon Risk + Cyber, we believe in defending the basic human right to security and privacy. We are looking for an exceptional Senior Risk Advisory Consultant to support the execution of Risk Advisory client engagements. This includes leading and executing relevant tasks, as well as assisting in developing service deliverables and internal processes that will drive value for the team and clients. Our next team member will be authentic, articulate, and passionate about Cybersecurity, and will be unafraid to roll up their sleeves and dive deep into the unknowns, using their security expertise to identify opportunities to increase Echelon Risk + Cyber's overall capabilities internally and for our clients. At Echelon, you will have the opportunity to engage with systems at the cutting edge of technology. We allow our employees to build from the ground up and make an impact across the organization. We look for driven, proactive people eager to contribute to a distinct and thriving Cybersecurity services organization that can adapt to a rapidly changing environment.This is a remote position from anywhere in Mexico. What You Will Do:Assist in the planning, scoping, execution, and reporting of cybersecurity risk and maturity assessments against frameworks such as NIST CSF, ISO 27001, SOC 2, and CMMCCollaborate with IT management and client leadership to develop roadmaps to enhance client maturityDevelop and maintain Cybersecurity policies and procedures while supporting clientsReview and assess security and technology controls against cybersecurity best practices and compliance frameworksCollaborate with clients to develop Incident Response Plans, and Incident Response Playbooks tailored to each client's environment and needsLead end-to-end tabletop exercise engagements, developing realistic, client-specific scenarios that align with organizational people, processes, and technologies and effectively engage technical, management, and executive audiencesDocument results, create client reports, and communicate results to client management and other stakeholdersWork collaboratively with our clients and other team members to identify information security risks and challenges and provide actionable recommendations and solutionsDemonstrate consistency, versatility, and adaptability while managing simultaneous client engagements and priorities and delivering quality results in a timely fashionWork with the internal team to develop and plan engagement strategies, define objectives, identify and provide recommendations to address client risksCreate client-facing presentations, reports, and analyticsDevelop long-term roadmaps to assist clients in reaching their desired maturity levelPerform business impact analyses and develop Business Continuity Plans and Disaster Recovery PlansAssist leadership in the creation of proposals, budgets, work plans, and other business development effortsEstablish exceptional internal and client relationships using strong communication skillsProduce thought leadership for the organization's website blog on a regular basisActively engage in the cybersecurity community by attending or speaking at local or national conferences Your knowledge, skills, and abilities:5+ years of related experience in the cybersecurity industryFocus on Governance, Risk, and Compliance planning, development, and managementKnowledge of GRC Platforms/Tools to assist with Assessments and Compliance ManagementRisk management experience, including performing assessments and audits, designing information security controls and processes, and evaluating and prioritizing riskExperience with a variety of information security frameworks and best practices (e.g., CIS, NIST, PCI, CMMC, ISO, GLBA, FFIEC, SOX, SOC, HIPAA, HITRUST, etc.)Ability to lead engagements from scoping through delivery, including managing client expectations, timelines, and deliverablesExperience with incident response, business continuity, and disaster recovery planning is preferredAbility to provide strategic guidance to clients on tabletop exercise design, incident preparedness, and resilience. Project Management experience preferredAbility to manage and prioritize multiple projects simultaneously and adapt in a demanding and changing environmentAlthough this is not a technical oriented role, knowledge of Cloud systems, applications, security services/tools (e.g., EDR, MDR, SIEM, Vulnerability Scanning, Email Security, Backup/DR, MDM), Firewalls, Basic Networking, Data Security, IAM/SSO, etc., will be beneficial in an advisory capacityAbility to mentor and provide guidance to junior consultants and contribute to the development of internal methodologies and best practicesStrong attention to detail and superior analytical, technical, and problem-solving skillsExcellent verbal and written communication skills with experience crafting professional messages and adjusting communication style based on audiencePreferred experience working with financial services, healthcare, or regulated industriesStrong English communication (B2+/C1/C2 Level) written and verbal.Authorized to work in Mexico without visa sponsorship. Preferred Qualifications:A Bachelor's Degree in a relevant IT or Cybersecurity majorStrong background in developing incident response plans, playbooks, and tabletop exercisesCertifications recommended: CISSP, CISA, CISM, or similar certificationExperience in client-facing roles with an ability to successfully manage multiple projects at once Why Echelon? We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality," and we want to allow you the space to bring your full self to work.We Currently Offer The Following Benefits: Access to private medical insurance through MetLifeLife insurance policy via MetLife30-day Christmas bonus and a monthly technology stipendContribution of 8% of the employee's salary to a savings fundFlexible vacation policy that allows you to manage your schedule and rest and recharge when you need to.Family-friendly benefits, extended parental leave for when you need to spend critical time with new family members, and employer-paid short-term and long-term disabilitySupport for individual development through certifications, continued learning, conferences, and moreWe value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status, or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.

Job Posted by ApplicantPro