Security GRC - Cybersecurity Risk Advisor

ECI; United States; Remote; USD 108,000 - 132,000; Full time

Job summary

ECI in the United States is seeking a Cybersecurity Risk Advisor with ~8 years of experience in cybersecurity, risk management, or IT governance to support financial services and government clients. You will assess risk, implement security frameworks, and ensure regulatory compliance across US, UK, EU, and Asia-Pacific regions.

You will collaborate with client leadership teams, including CISOs and IT executives, to tailor security programs, define roadmaps, and drive remediation efforts while

Qualifications

• Bachelor’s degree in a relevant field; typically 4+ years in information security, IT operations, or a related technical role.
• Experience conducting security assessments, audits, and risk analyses.
• Strong understanding of international regulatory frameworks and global standards (ISO 27001, NIST CSF, CIS Controls, COBIT).
• Ability to communicate with senior stakeholders and drive remediation efforts.

Responsibilities

• Create trusted advisor relationships with clients and lead cybersecurity risk discussions.
• Develop and implement risk management strategies for financial services and government clients across regions.
• Advise on regulatory compliance and alignment with global standards (ISO 27001, NIST CSF, CIS Controls, COBIT).
• Conduct security assessments and gap analyses; recommend actionable improvements.
• Coordinate with CISOs and IT leadership to align cybersecurity with business objectives.
• Stay current with evolving threats and regulatory changes across regions.
• Assist with audits and remediation planning; contribute to knowledge sharing within the team.
• Travel within the US region up to 15% as required.

Skills

CISSP

CISM

CRISC

CCSP

NIST CSF 2.0

ISO 27001

CIS Controls

COBIT

Regulatory awareness

Stakeholder management

Education

Bachelor’s degree in Computer Science/Information Security or related field

Tools

Microsoft suite

Job description

About ECI

ECI is the leading global provider of managed services, cybersecurity, and business transformation for mid-market financial services organizations across the globe. From its unmatched range of services, ECI provides stability, security and improved business performance, freeing clients from technology concerns and enabling them to focus on running their businesses. More than 1,000 customers worldwide with over $3 trillion of assets under management put their trust in ECI.

At ECI, we believe success is driven by passion and purpose. Our passion for technology is only surpassed by our commitment to empowering our employees around the world.

As a Cybersecurity Risk Advisor supporting clients across the United States, United Kingdom, European Union, and Asian Pacific regions, you will play a pivotal role in strengthening the cybersecurity posture of leading financial institutions. This role is ideal for a seasoned professional with approximately 8 years of experience in cybersecurity, risk management, or IT governance, particularly within the financial services and government sector. You will work closely with client leadership teams to assess risk, implement security frameworks, and ensure compliance with regional regulatory standards such as NIST CSF 2.0, CMMC, GDPR, Data Protection Act 2018, and others. You will also contribute to the development of security strategies that align with both global best practices and local regulatory expectations.

Position Responsibilities

• Create a relationship with clients as a trusted cybersecurity advisor.
• Develop and implement cybersecurity risk management strategies tailored to the needs of financial services and government clients in various regions.
• Advise clients on compliance with regulatory frameworks and global standards like ISO 27001, NIST, and CIS.
• Conduct security assessments and gap analyses to identify weaknesses and recommend actionable improvements.
• Collaborate with client stakeholders, including CISOs and IT leadership, to align cybersecurity initiatives with business objectives.
• Stay current with evolving cyber threats, regulatory updates, and industry trends across various regions.
• Support clients during internal and external audits, including preparation of documentation and remediation planning.
• Collaborate with team members and contribute to the continuous improvement of internal methodologies and knowledge sharing.
• Respond to ad hoc client queries related to cybersecurity, risk, and compliance.
• Travel within the US region up to 15% as required.
• Other duties as assigned.

Position Requirements

• Excellent communication and presentation skills, with the ability to engage senior stakeholders and varied audiences and explain complex topics in business terms.
• Strong understanding of international regulatory frameworks.
• Familiarity with global standards such as ISO 27001, NIST CSF, CIS Controls, and COBIT.
• Proven experience conducting security assessments, audits, and risk analyses.
• Self-motivated, adaptable, and capable of working independently on tasks and projects.
• Bachelor’s degree in a relevant field such as Computer Science, Information Technology, Cybersecurity or equivalent combination of education and professional experience, typically 4+ years in information security, IT operations, or a related technical role.

Preferred Qualifications

• Experience in cybersecurity, IT risk, or compliance, preferably within the financial services sector.
• Industry certifications such as CISSP, CISM, CRISC, or CCSP
• Previous MSP/MSSP experience.
• Technical knowledge of IT systems and security controls (e.g., Microsoft, Cisco, endpoint protection, IAM, etc.).
• Strong familiarity with and understanding of O365 admin center.

Working Conditions

• Ability to work in a remote environment with moderate supervision
• Overtime may be required to meet project deadlines (including late nights and weekends)
• Ability to travel for business and work beyond normal business hours when necessary
• Ability to be flexible and successfully respond to multiple work pressures
• Sitting for extended periods of time
• Dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and to handle other computer components

ECI’s culture is all about connection - connection with our clients, our technology and most importantly with each other. In addition to working with an amazing team around the world, ECI also offers a competitive compensation package and the range for this role is a maximum of $120,000 annually (depending on experience & location), plus variable with flexible PTO, health benefit eligibility the first of the month, life insurance, pet insurance, 401K and so much more!