Compliance & Risk Consultant

Silent Breach; New York (NY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance and dental coverage

Paid family leave

Flexible hybrid work

Professional development funding

Certification sponsorship

Generous vacation

Global travel opportunities

Job summary

Silent Breach seeks a Compliance & Risk Consultant to guide organizations through complex certification programs such as SOC 2, ISO 27001, HIPAA, and PCI-DSS. The role blends technical and business acumen to achieve compliance readiness and maintain security posture alignment.

Key duties include risk assessments, control testing, and facilitating audits. You will map processes to frameworks, document findings, and advise leadership on governance and mitigation strategies, coordinating with

Qualifications

• Experience with SOC 2, ISO 27001, HIPAA, or PCI-DSS frameworks.
• Background in cybersecurity consulting, auditing, or risk management.
• Strong analytical and communication skills for executive reporting.
• Understanding of GRC tools and automated compliance workflows.
• Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor preferred.

Responsibilities

• Conduct risk assessments, control testing, and compliance gap analyses.
• Map organizational processes to compliance frameworks and regulations.
• Prepare clients for external audits with full documentation and evidence support.
• Advise leadership on security governance and risk mitigation strategies.
• Coordinate with penetration testing and managed security teams to validate findings.

Skills

SOC 2

ISO 27001

HIPAA

PCI-DSS

Cybersecurity consulting

Risk management

Analytical communication

GRC tools

Certifications (CISA/CISSP)

Tools

GRC software

Job description

The Compliance & Risk Consultant will guide organizations through complex certification and governance programs such as SOC 2, ISO 27001, HIPAA, and PCI-DSS. This role combines technical and business acumen to help clients achieve compliance readiness and maintain security posture alignment.

Key Duties

• Conduct risk assessments, control testing, and compliance gap analyses.
• Map organizational processes to compliance frameworks and regulations.
• Prepare clients for external audits with full documentation and evidence support.
• Advise leadership on security governance and risk mitigation strategies.
• Coordinate with penetration testing and managed security teams to validate findings.

Qualifications

• Experience with SOC 2, ISO 27001, HIPAA, or PCI-DSS frameworks.
• Background in cybersecurity consulting, auditing, or risk management.
• Strong analytical and communication skills for executive reporting.
• Understanding of GRC tools and automated compliance workflows.
• Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor preferred.

Comprehensive health and dental insurance, paid family leave, flexible hybrid work, professional development funding, certification support, generous vacation policy, and opportunities for global travel and collaboration.

Company Description

Silent Breach is a global leader in offensive cybersecurity, combining cutting-edge research, real-world intelligence, and advanced defensive strategies to protect organizations against the world’s most sophisticated threats. With offices in New York, Paris, Singapore, Chennai, Tampa, and Tallinn, we empower clients to think like hackers - and defend like pros.

What is the hiring process at Silent Breach?

Our recruitment process includes an initial interview, technical assessment, and final conversation with leadership. For technical roles, you may also complete a live challenge or case study that mirrors real client scenarios.

Does Silent Breach hire international applicants or offer relocation support?

Yes. Silent Breach welcomes global talent across all regions. For select roles, we offer relocation assistance or visa sponsorship. Many international employees work remotely or from one of our global offices in New York, Paris, Singapore, Chennai, Tampa, or Tallinn.

How does Silent Breach support professional growth?

We invest heavily in training and certifications. Employees receive funding for industry-recognized credentials such as OSCP, CISSP, and AWS Security, as well as opportunities to attend global cybersecurity conferences.

What kind of projects will I work on?

Our teams handle high-impact, real-world cybersecurity challenges - from global penetration tests and 0-day research to managed defense for Fortune 500 companies and critical infrastructure operators.

Silent Breach offers comprehensive health and dental insurance, paid family leave, flexible vacation, certification sponsorship, and a collaborative, research-driven culture where every team member contributes to innovation.