Senior Consultant, HITRUST Assessor

CGVantage, LLC; United States; À distance; USD 110 000 - 150 000; Plein temps

Résumé du poste

CGVantage, LLC is seeking a Senior Consultant to lead SOC 1, SOC 2, SOC 3, and HITRUST engagements from planning through reporting. This remote role supports clients across the United States and Canada with limited direction, working as a lead auditor on complex projects and coaching junior staff.

You will assess frameworks (AICPA, NIST CSF, ISO 27000, HIPAA/HITRUST), develop testing plans, review workpapers, and maintain firm methodology while managing client relationships.

Qualifications

• Bachelor's degree in accounting, information systems, cybersecurity, or related field or equivalent experience.
• Typically 3–6 years of IT audit, assurance, risk, or compliance experience.
• Familiarity with ISO 27001, CIS Controls, NIST CSF, HIPAA, HITRUST.
• Experience leading more-complex SOC or AICPA attestation engagements.
• Proficiency with audit methods, evidence, and reporting.

Responsabilités

• Develop engagement scope and testing plans and evaluate controls.
• Assess client environments against AICPA, NIST CSF, ISO 27000, HITRUST, PCI/HIPAA.
• Review workpapers for accuracy and supported conclusions.
• Manage day-to-day client relationships and status meetings.
• Coordinate team assignments, schedules, budgets, and deadlines.
• Prepare complete draft SOC and attestation reports for finalization.
• Escalate significant issues and resource needs with recommendations.
• Coach Associates and Consultants to lead engagements.
• Maintain knowledge and improve firm methodology and templates.

Connaissances

IT audit

Risk assessment

Leadership of engagements

Written communication

Time management

Formation

Bachelor's degree in accounting, information systems, cybersecurity, or related field

Outils

Microsoft Office

GRC systems

Description du poste

Location: United States or Canada (remote)

CGVantage is a fast-growing cybersecurity and compliance services firm trusted by organizations that demand deep technical expertise, rigorous methodologies, and measurable outcomes. We help clients reduce risk, strengthen their security posture, and navigate complex compliance requirements across frameworks including SOC, ISO, PCI, and HITRUST.

The Senior Consultant's primary responsibility is executing SOC 1, SOC 2, SOC 3, and HITRUST certifications. You will serve as Lead Auditor for more-complex engagements from planning through reporting and closure with limited direction. Supporting responsibilities include multi-framework assessments and development of junior engagement leads.

SUPERVISORY RESPONSIBILITY

This position has no formal direct reports. Provides engagement-level guidance as assigned.

CORE RESPONSIBILITIES

• Develop engagement scope and testing plans, evaluate complex controls, and assess exceptions under applicable AICPA standards and firm methodology.
• Assess client environments against AICPA Trust Services Criteria, NIST CSF, the ISO 27000 series, HITRUST CSF, PCI DSS, and HIPAA; tailor testing and conduct readiness assessments.
• Review Associate and assigned Consultant workpapers for accuracy, sufficient evidence, and supported conclusions.
• Manage day-to-day client relationships, lead status meetings, communicate findings, and resolve routine delivery issues.
• Coordinate team assignments and review schedules, monitor budgets and deadlines, and provide regular written status reports and completion forecasts.
• Prepare complete draft SOC and other attestation reports and resolve review comments through finalization.
• Escalate significant technical issues, scope changes, and resource needs to management with recommendations.
• Coach Associates and Consultants to lead engagements and support the transfer of suitable assignments.
• Maintain technical knowledge and improve firm methodology, templates, and training.

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice, as allowed by law. Occasional evening or weekend work may be required.

WHAT YOU BRING

Required

• Bachelor's degree in accounting, information systems, cybersecurity, or a related field, or equivalent relevant experience.
• Typically 3–6 years of total relevant experience in IT audit, assurance, risk, or compliance.
• Familiarity with multiple information security and compliance frameworks, such as ISO 27001, CIS Controls, NIST CSF, HIPAA, and HITRUST.
• Experience leading more-complex SOC or other AICPA attestation engagements and independently applying an additional relevant framework in testing or readiness assessments.
• Working knowledge of IT risks, control design and operating effectiveness, audit evidence, and testing methods.
• Demonstrated ability to produce complete, review-ready files and draft reports with limited substantive comments, review staff work, and develop effective Lead Auditors.
• Clear written and verbal communication, sound judgment, attention to detail, and ability to manage competing deadlines.
• Proficiency with Microsoft Office and the ability to learn audit and GRC systems; commitment to confidentiality and client service.

Preferred

• CISA and/or an active CPA license; CISM, CISSP, ISO 27001 Lead Auditor, or HITRUST credentials are also valued.
• Experience with a Big 4 firm or a national CPA firm.
• Client-service experience in public accounting, advisory, consulting, or professional services.
• Experience assessing cloud and SaaS environments and modern security controls, including access management, change management, CI/CD, and logging and monitoring.
• Experience with SOX IT controls or CIS benchmarks.

PHYSICAL REQUIREMENTS

This job operates in a professional virtual remote work environment. While performing the essential functions of this job, the employee is required to stand and sit for prolonged periods. Specific vision abilities required include close and medium distance vision and the ability to adjust focus. Must be able to hear normal sounds, distinguish sound as voice and communicate through human speech. This position requires the ability to routinely operate a keyboard, computer mouse, telephone, scanner, writing tools, scissors, and other standard office equipment. On occasion, an employee will be asked to lift items weighing up to 25 lbs.

TRAVEL

Local and overnight travel of approximately 15% is expected for this position.