Remote GRC Security Advisor

Soteria LLC; Charleston (SC); On-site; USD 80,000 - 135,000; Full time

Job summary

Soteria LLC, based in Charleston, South Carolina, is seeking a Security Advisor to join the remote GRC team. You will assess risk, evaluate controls, and deliver clear, well-documented findings to clients, with emphasis on authenticity, engagement, and professional communication.

The role involves conducting control gap and regulatory assessments, developing remediation plans, and producing executive summaries, action plans, and policy documents for boards and C-suite.

Qualifications

• 5+ years of industry experience in cybersecurity
• 2+ years in cybersecurity consulting, IT audits or assessments
• Familiarity with frameworks such as NIST CSF, CMMC, ISO 27001 and CIS Controls
• Relevant certifications such as CISSP, CISM, CISA, etc.

Responsibilities

• Perform control gap, risk, and compliance assessments to identify gaps in client security programs.
• Develop and perform social engineering simulations (phishing, vishing) and deliver training to improve security awareness.
• Provide project management tasks to ensure timely assessment delivery and client satisfaction.
• Identify gaps in controls and make strategic recommendations based on regulatory frameworks and desired controls.
• Conduct interviews with clients and internal teams to assess IT environments and security practices.
• Produce executive summaries, findings, recommendations, and plans of action in professional reports.

Skills

Cybersecurity expertise

Project management

Client communication

Regulatory knowledge

Risk assessments

Education

CISSP/CISM/CISA certifications

Tools

Microsoft Office

Advanced Excel

Job description

Soteria LLC, based in Charleston, South Carolina, is seeking a Security Advisor to join the remote GRC team. You will assess risk, evaluate controls, and deliver clear, well-documented findings to clients, with emphasis on authenticity, engagement, and professional communication.

The role involves conducting control gap and regulatory assessments, developing remediation plans, and producing executive summaries, action plans, and policy documents for boards and C-suite.