Senior Cybersecurity Consultant - GRC, Cloud & Compliance

Grant Thornton (US); Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Grant Thornton (US) is seeking a cybersecurity consultant to lead maturity assessments, advise senior stakeholders on cloud security and risk, and develop strategic roadmaps. The role requires strong GRC knowledge, regulatory familiarity, and the ability to translate complex risks into actionable insights.

The candidate will work with cross-functional teams, mentor junior staff, and support business development efforts while delivering high-impact security programs for diverse clients.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or related discipline.
• 3+ years (5+ for manager) in cybersecurity consulting, enterprise security, or risk leadership.
• Familiarity with NIST, ISO/IEC 27001, ISA 62443, CIS Controls, MITRE ATT&CK, PCI-DSS.

Responsibilities

• Lead end-to-end cybersecurity maturity assessments using frameworks like NIST CSF, 800-53, ISO 27001, CIS controls.
• Evaluate risks with third-parties and critical services in cybersecurity context.
• Conduct interviews, workshops, and document reviews to evaluate practices.
• Develop data-driven insights and recommendations aligned to client risk appetites.
• Create strategic roadmaps to improve maturity, compliance, governance.
• Collaborate with client leadership to embed cyber risk in decisions.
• Support business development including proposals and presentations.
• Mentor consultants and contribute to internal methodologies.

Skills

GRC

Cloud security

Zero trust

IAM

Data privacy

Threat management

Incident response

Regulatory compliance

CISSP

CISM

CRISC

ISO 27001 Lead

PCI-DSS

NIST

NIS2

DORA

CRA

GDPR

Presentations

Consulting experience

Education

Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related discipline.

Tools

NIST/ISO/ISA frameworks

CIS Controls

Job description

Grant Thornton (US) is seeking a cybersecurity consultant to lead maturity assessments, advise senior stakeholders on cloud security and risk, and develop strategic roadmaps. The role requires strong GRC knowledge, regulatory familiarity, and the ability to translate complex risks into actionable insights.

The candidate will work with cross-functional teams, mentor junior staff, and support business development efforts while delivering high-impact security programs for diverse clients.