GRC Senior Consuntant (vCISO) - Remote (USA)

Echelon Risk + Cyber; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

HSA/FSA benefits

401(k) with employer contribution

Flexible vacation policy

Holiday package

Family-friendly benefits

Professional development support

Job summary

Echelon Risk + Cyber is seeking a Senior Consultant to lead client engagements in our vCISO Practice from anywhere in the USA. You will own major project work, mentor juniors, and oversee quality reviews to ensure client deliverables meet Echelon standards.

The role requires strong governance, risk, and compliance experience, excellent communication with executives, and the ability to develop security roadmaps and engagement strategies while growing accounts and the practice.

Qualifications

• 5+ years in cybersecurity, governance, risk, and compliance planning and management.
• Experience leading client-facing work, workshops, and deliverables.
• Mentoring or coaching junior staff is a plus.
• Risk management: assessments, mitigation strategies, prioritization.
• Familiarity with multiple security frameworks (CIS, NIST, PCI, ISO, SOC, HIPAA).
• Knowledge of GRC platforms and tools.

Responsibilities

• Lead client engagements and major initiatives with defined scope and timelines.
• Plan, facilitate client workshops and risk assessments for senior stakeholders.
• Review and assure quality of reports, policies, roadmaps before client delivery.
• Grow accounts, propose engagement strategies, and help define objectives.

Job description

About Us: At Echelon Risk + Cyber, we believe in defending basic human rights to security and privacy. We are looking for an exceptional Senior Consultant for our growing vCISO Practice. This individual will lead and deliver client engagements, quality-review the work of the broader team, and help build the processes that support Echelon's continued growth. Consultative client work spans a wide range of industries, sizes, and compositions.

Our next team member will be ready to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned integrity. This person is passionate about cybersecurity, works as an Entrepreneurial Problem Solver, and builds creative solutions alongside Echelon teammates.

At Echelon the learning never stops. You will engage with systems at the cutting edge of technology and work with team members who challenge you with meaningful work. We let people build from the ground up and make an impact across the organization.

As a Senior Consultant, you are a trusted, reliable resource for clients and a technical and delivery leader inside Echelon. You will own significant portions of client initiatives and key deliverables, lead workshops, quality-review team output before it reaches the client, and coach junior consultants. You will address broader strategic challenges for clients, proactively identify and address project risks, and represent Echelon with confidence in senior-level discussions.

This is a remote position from anywhere in the USA

What You Will Do:

Lead client engagements and initiatives

• Own and manage defined portions of client initiatives, including scope, timeline, dependencies, status reporting, and delivery of key deliverables.
• Conduct client discoveries and onboarding of services, including client interviews, discovery and assessment plans, evidence requests, and review of documentation and supporting evidence.
• Plan, coordinate, and manage cybersecurity and compliance programs using strong project management and communication techniques (e.g., build security roadmaps, prioritize and track initiatives).
• Proactively identify and address project risks, scope changes, and client dependencies before they affect delivery.

Facilitate workshops and advise senior stakeholders

• Plan and lead client workshops, such as risk assessments, framework assessments and policy walkthroughs.
• Communicate complex security and compliance topics clearly to senior client stakeholders, adjusting message and depth to the audience.
• Work with clients to identify information security risks and challenges and provide actionable, right-sized recommendations.
• Represent Echelon in high-level client discussions.

Assess, document, and assure quality

• Review and assess security and technology controls against cybersecurity best practices and compliance frameworks.
• Develop and maintain cybersecurity policies and procedures.
• Perform quality assurance review of team deliverables, including reports, assessments, policies, roadmaps, and presentations, for accuracy, completeness, consistency, and adherence to Echelon standards before client delivery.
• Document results, create client reports, and communicate findings to client management and other stakeholders.
• Create client-facing presentations and executive-level reporting.

Grow accounts and the practice

• Take ownership of proposals, statements of work, budgets, and work plans, and contribute strategic insights to business development efforts.
• Identify new growth opportunities within client accounts and partner with leadership to act on them.
• Work with the internal team to develop engagement strategies, define objectives, and recommend approaches to address client risks.
• Help build and improve Echelon's internal processes, templates, and methodologies.

Coach and develop the team

• Provide guidance, coaching, and feedback to junior team members, and contribute to team capability through training.
• Model Echelon values, including "Turning Pro" and "Client Centricity," by mentoring others on technical excellence, ownership, and follow-through.
• Manage multiple simultaneous client engagements and priorities while delivering quality results on time.

Contribute to the community

• Create and execute a formal plan for personal growth marketing, including regularly publishing thought leadership for Echelon's website blog.
• Engage in the cybersecurity community by attending or speaking at local or national conferences.

Your Knowledge, Skills, and Abilities:

• 5+ years of related experience in the cybersecurity industry, with a focus on governance, risk, and compliance planning, development, and management. Consulting or advisory experience preferred.
• Demonstrated experience leading client-facing work, such as facilitating workshops, owning deliverables, or managing portions of projects.
• Experience reviewing the work of others and providing constructive feedback; prior mentoring or coaching of junior staff is a plus.
• Risk management experience, including performing assessments, recommending risk mitigation strategies, as well as evaluating and prioritizing risks.
• Depth of expertise across multiple information security frameworks and best practices (e.g., CIS, NIST, PCI, CMMC, ISO, GLBA, FFIEC, SOX, SOC, HIPAA, HITRUST).
• Knowledge of GRC platforms and tools that support assessments and compliance management.
• Excellent verbal and written communication skills, with the ability to craft professional messages and adjust style to the audience, from technical teams to executives and boards.
• Ability to manage and prioritize multiple projects simultaneously and adapt in a demanding, changing environment.
• Strong attention to detail and superior analytical, technical, and problem-solving skills.
• Although this is not a deeply technical role, working knowledge of cloud systems, applications, and security tools and services (e.g., EDR, MDR, SIEM, vulnerability scanning, email security, backup/DR, MDM), firewalls, basic networking, data security, and IAM/SSO is valuable in an advisory capacity.
• Preferred experience working with financial services, healthcare, or other regulated industries.
• Degree in Information Systems, Computer Science, Information Security, or a related discipline preferred. Project management experience preferred.
• Preferred certifications: CISSP, CISA, CISM, or similar.
• Intellectual curiosity, with a willingness to learn and develop.
• Applicants must have authorization to work in the United States without current or future visa sponsorship.

Why Echelon?

We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality," and we want to allow you the space to bring your full self to work.

We currently offer the following benefits:

• Access to medical, dental, and vision insurance through Cigna, with the majority of the employee cost covered by the employer
• Employer funding to HSA accounts and FSA access
• Access to a 401(k) through Vanguard with a guaranteed employer contribution
• Flexible vacation policy that allows you to manage your schedule and rest and recharge when you need to
• 11 holidays with flexibility based on what is important for you and those you love
• Family-friendly benefits, including weeks off for Maternity leave, weeks off for non-birthing parent leave, employer-paid short-term and long-term disability, employer-paid life insurance, and access to additional life insurance, hospital coverage, accidental coverage, discounted mental health support, and more
• Support for individual development through certifications, continued learning, conferences, and more

We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status, or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.