Information Security Consultant

Jobtailor; Fayetteville (AR); On-site; USD 70,000 - 110,000; Full time

Job summary

Jobtailor is seeking a cybersecurity risk management consultant to provide IT risk management, information security, and compliance services to clients in Fayetteville, AR. You will perform risk assessments and audits to ensure regulatory alignment and help leaders implement effective controls.

You will assist with incident response, develop policies and processes, and communicate risk findings clearly to management and clients, ensuring projects stay on track and meet deadlines.

Qualifications

• 2+ years of related experience
• 2+ years implementing Cybersecurity Programs
• 2+ years implementing Compliance and Governance Programs
• CISSP or other current industry standard certifications
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)
• Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls
• Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels
• Ability to develop policies, standards and baseline configurations
• Strong attention to detail and ability to document findings and convey information
• Ability to manage project deliverables and deadlines
• Ability to provide superior customer service via phone and email
• Strong listening and presentation skills
• Ability to clearly communicate with co‑workers, management, clients, and vendors.

Responsibilities

• Provide IT risk management, information security, and compliance consulting services to clients
• Perform risk assessments and audit systems for compliance
• Work with IT and business leaders to identify risks and recommend improvements
• Assist with incident response during security events
• Develop materials and processes to assist clients with implementing both technical and non‑technical controls

Skills

IT risk mgmt

Info security

Compliance knowledge

Risk assessments

Incident response

Policy development

Project management

Customer service

Communication skills

CISSP

Job description

• Provide IT risk management, information security, and compliance consulting services to clients
• Perform risk assessments and audit systems for compliance
• Work with IT and business leaders to identify risks and recommend improvements
• Assist with incident response during security events
• Develop materials and processes to assist clients with implementing both technical and non‑technical controls

Requirements

• 2+ years of related experience
• 2+ years implementing Cybersecurity Programs
• 2+ years implementing Compliance and Governance Programs
• CISSP or other current industry standard certifications in areas of security expertise
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)
• Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls
• Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels
• Ability to develop policies, standards and baseline configurations
• Strong attention to detail and ability to document findings and convey information
• Ability to manage project deliverables and deadlines
• Ability to provide superior customer service via phone and email
• Strong listening and presentation skills
• Ability to clearly communicate with co‑workers, management, clients, and vendors.

Core Competencies

Demonstrates expertise in IT Risk Management, Information Security, and Compliance Consulting, with a strong focus on implementing Cybersecurity and Governance Programs. Proficient in conducting risk assessments, developing security policies, and ensuring adherence to regulatory standards.