Remote Principal Cyber Risk Advisor Board Level GRC Leader

ECI; United States; Remote; USD 140,000 - 150,000; Full time

Benefits offered by this job

Unlimited PTO

Benefit eligibility from the first of月

Pet insurance

401(k) with employer match

Job summary

ECI is seeking a Principal Cyber Risk Advisor to lead multi-framework GRC programs and advise executive leadership on security strategy. You will own client engagements, develop risk-based roadmaps, and drive auditable compliance across complex environments.

With 7–10+ years in information security and strong advisory experience, you will mentor teams and shape policy suites while collaborating with internal and client teams globally. A flexible, high-impact role awaits.

Qualifications

• 7–10+ years of information security, GRC, or IT risk in consulting or advisory environments.
• At least 3 years in a client-facing advisory, vCISO, or principal consultant capacity.
• Demonstrated experience managing multi-framework compliance programs (CMMC, NIST, SOC 2, ISO 27001, TISAX).
• Experience supporting M&A transactions from a GRC/security perspective — due diligence, gap analysis, or integration planning.
• Bachelor's degree in CS/IS or related field; advanced degree preferred.

Responsibilities

• Serve as a named senior advisor to client CTO, CISO, and executive leadership, owning strategic direction and day-to-day program execution.
• Lead steering sessions, quarterly reviews, and board-level risk briefings with direct materials delivery.
• Develop and maintain rolling GRC roadmaps aligned to client priorities, regulatory calendars and risk appetite.
• Translate complex regulatory and technical requirements into actionable guidance for stakeholders.
• Own audit lifecycles from pre-audit readiness to post-audit remediation across multiple engagements.

Skills

GRC program management

Regulatory frameworks

CMMC 2.0 experience

M&A due diligence

Client advisory to C-suite

Security architecture & risk analysis

Communication

Education

Bachelor's degree in CS/IS/related field

Advanced degree preferred

Tools

Vanta

Cynomi

Drata

Archer

ServiceNow GRC

Job description

ECI is seeking a Principal Cyber Risk Advisor to lead multi-framework GRC programs and advise executive leadership on security strategy. You will own client engagements, develop risk-based roadmaps, and drive auditable compliance across complex environments.

With 7–10+ years in information security and strong advisory experience, you will mentor teams and shape policy suites while collaborating with internal and client teams globally. A flexible, high-impact role awaits.