Security Advisor - GRC

Soteria, LLC; Charleston (SC); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Soteria, LLC is seeking a Security Advisor to join a fast-paced GRC team, supporting clients in navigating today’s threat landscape. You will assess risk, evaluate controls, and guide clients toward stronger security postures with clear, well-documented findings.

Responsibilities include conducting control gap analyses, developing training, and providing project management to ensure timely deliverables. Remote-friendly role with occasional travel for engagements.

Qualifications

• 5+ years in cybersecurity with hands-on experience
• 2+ years in cybersecurity consulting, IT audits or assessments
• Familiarity with NIST CSF, CMMC, ISO 27001, CIS Controls
• Strong knowledge of Microsoft Office suite and advanced Excel
• Certifications such as CISSP, CISM, CISA, etc.

Responsibilities

• Perform control gap, risk, and compliance assessments to identify gaps in client security programs.
• Develop and conduct social engineering simulations (phishing, vishing) and deliver training to improve security awareness.
• Provide project management to ensure timely assessment delivery and alignment with client needs.
• Identify gaps in controls and recommend remediation based on regulatory frameworks and business goals.
• Document findings and produce executive summaries, detailed reports, and plans of action.

Skills

Cybersecurity experience

Consulting

Project management

Client communication

Education

CISSP

CISM

CISA

Tools

Microsoft Suite

Advanced Excel

Job description

Established in 2014 and based in Charleston, South Carolina, Soteria's expertise in the cybersecurity domain is predicated upon the accumulated practical experience across all team members. Soteria's security professionals have held leading positions in private industries, state governments, and federal intelligence communities.

Driven by this combined pool of knowledge as well as the belief that “Security is for Everyone,” Soteria offers advisory services and solutions which are significantly differentiated from the security status quo. Soteria treats each client as a unique case deserving of individualized security insights and specialized hands-on assistance.

About the role

As a Security Advisor at Soteria, you will join a fast-paced GRC team supporting a growing roster of clients navigating today's threat landscape. This role calls for authenticity, engagement, curiosity, and care reflected in every client interaction. You will assess risk, evaluate controls, guide clients toward stronger security postures, delivering clear, timely, well-documented findings.

Success here requires solid technical grounding, paired with strong project management, requirements gathering, and client communication skills. You will juggle multiple engagements at once, adapting quickly, maintaining high quality under tight deadlines.

What you'll do

• Perform control gap, risk, and compliance/regulatory assessments to help organizations understand where gaps exist within client security programs.
• Develop and perform social engineering simulations (phishing, vishing) and present social engineering training to organizations to improve their security awareness programs.
• Provide project management tasks to ensure assessment delivery is on time and meets the client’s needs.
• Identify gaps in desired control implements and determine appropriate recommendations for clients based on identified regulatory framework and desired controls.
• Conduct interviews with clients and the Soteria team to evaluate a client’s IT environment and security practices.
• Work closely with clients and the Soteria team to develop deliverables to include, but not limited to:
• executive summary reports
• detailed findings and recommendations reports
• plans of action and milestones
• policy and procedure development
• Provide support and guidance where necessary to Advisory team members to achieve excellence in the various business areas of Trusted Advisory and vCISO, Risk/Gap Assessments, Incident Response Readiness, Table Top Exercises, Business Continuity and Disaster Recovery Plans and Policy development.
• Write clear and well-structured reporting to detail observations and strategic recommendations, at an appropriate level for the intended audience.
• Identify cybersecurity-related regulatory requirements (e.g., PCI-DSS, HIPAA, CCPA, GDPR, NYDFS) as well as gaps in compliance, and develop strategic plans to achieve and maintain compliance.
• Work closely with clients and the Soteria team to develop remediation plans to ensure clients achieve their desired outcomes.
• Document and present findings and recommendations to clients, including C-Suite and board-level executives, in a professional manner.
• Support project team with quality assurance review of deliverables.
• Maintain relationships with clients post-assessment in order to assist and advise as they continue to build and improve their security.
• Maintain competence in security trends, technologies, and practices through self-study and attendance of industry events.
• Maintain integrity and confidentiality for sensitive client information.
• Assess and research common business platforms and technologies to deliver recommendations for secure configurations.

Qualifications

• 5+ years of industry experience with an understanding of the cybersecurity space
• 2+ years of experience in a cybersecurity consulting role; specifically conducting IT audits or assessments
• Familiarity with cybersecurity frameworks such as NIST CSF, CMMC, ISO 27001, and CIS Controls
• Strong knowledge of Microsoft Suite, Advanced Excel skill a plus
• Relevant certifications such as CISSP, CISM, CISA, etc.

Hours of Operation:

• Soteria is a remote workforce with flexibility in scheduling. The majority of work time will be 9:00 AM EST to 5:00 PM EST .

This is a remote position; however, occasional travel may be required for client engagements, team meetings, or other business needs.