Information Security Consultant & Risk Advisor

HEARTLAND BUSINESS SYSTEMS LLC; Little Chute (WI); On-site; USD 120,000 - 180,000; Full time

Job summary

Heartland Business Systems LLC is seeking an Information Security Consultant to provide IT risk management, information security, and compliance consulting across diverse industries. You will conduct risk assessments, review controls for regulatory compliance, and guide clients in mitigating risks across administrative, technical, and physical domains.

The role may involve acting as a vCISO under supervision, with responsibilities for developing and delivering security programs, policies, and

Qualifications

• CISSP or other current industry standard certifications in areas of security expertise.
• Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities.
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management.
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS).
• Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls.
• Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels.
• Ability to develop policies, standards and baseline configurations.
• Strong attention to detail and ability to document findings and convey information.
• Ability to manage project deliverables and deadlines.
• Ability to provide superior customer service via phone and email.
• Strong listening and presentation skills.
• Ability to clearly communicate with co-workers, management, clients, and vendors.

Responsibilities

• Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements.
• Review and recommend technical, administrative, and physical controls to mitigate identified risk.
• Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client’s stated risk tolerance levels.
• Develop materials and processes to assist clients with implementing both technical and non-technical controls.
• Assist with incident response during security events.

Skills

Risk assessment

Regulatory compliance

Information security

Incident response

Client communication

Project management

Auditing

Leadership

Education

CISSP

CISA

CRISC

Bachelor's degree in a related field

Job description

Heartland Business Systems LLC is seeking an Information Security Consultant to provide IT risk management, information security, and compliance consulting across diverse industries. You will conduct risk assessments, review controls for regulatory compliance, and guide clients in mitigating risks across administrative, technical, and physical domains.

The role may involve acting as a vCISO under supervision, with responsibilities for developing and delivering security programs, policies, and