Senior Cyber Governance & Risk Consultant

OpenKrill; United States; Remote; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

OpenKrill helps clients manage cybersecurity risk, governance, and compliance. We require senior professionals to plan and deliver readiness, gap, and maturity assessments across frameworks including ISO 27001, ASD Essential Eight, NIST CSF 2.0, and AI governance standards.

The role involves stakeholder interviews, evidence-based reporting, and advisory work for executive leadership. Strong communication and analytical skills are essential for success in this client-facing environment.

Qualifikationen

• Plan, coordinate, and deliver cybersecurity readiness and maturity assessments.
• Assess frameworks such as ISO/IEC 27001, ASD Essential Eight, NIST CSF 2.0, and ISO/IEC 42001.
• Evaluate design, implementation, and operating effectiveness of controls.
• Conduct stakeholder interviews and examine evidence.
• Assess risk management, incident response, and third-party risk processes.
• Identify control gaps and remediation opportunities.
• Ensure findings are evidence-based and defensible.

Aufgaben

• Cybersecurity Risk & Compliance Assessments: plan, coordinate, and deliver assessments for clients.
• Risk-Based Reporting & Executive Advisory: prepare executive summaries and remediation roadmaps.
• Assessment Methodology & Quality Assurance: develop templates and testing procedures, maintain QA standards.

Kenntnisse

Experience in governance, risk &-comli

Cybersecurity risk assessments

Client-facing delivery

Stakeholder interviewing

Evidence gathering and evaluation

Control assessment & reporting

Cybersecurity governance knowledge

Enterprise risk management

Compliance principles

Collaboration with engineers and execs

Multiple assessment management

ISO/IEC 27001 risk assessment

ASD Essential Eight maturity

NIST CSF 2.0 application

GRC frameworks familiarity

AI governance data protection

Audit evidence management

Regulatory knowledge (various)

Executive risk reporting

Assessment methodology design

Quality assurance in assessments

Ausbildung

ISO/IEC 27001 Lead Auditor

ISO/IEC 27001 Lead Implementer

Certified Information Systems Auditor (CISA)

Certified Information Security Manager (CISM)

Certified in Risk and Information Systems Control (CRISC)

IAPP Artificial Intelligence Governance Professional (AIGP)

ISACA Advanced in AI Audit (AAIA)

ISO/IEC 42001 Lead Auditor or Lead Implementer

Jobbeschreibung

OpenKrill helps clients manage cybersecurity risk, governance, and compliance. We require senior professionals to plan and deliver readiness, gap, and maturity assessments across frameworks including ISO 27001, ASD Essential Eight, NIST CSF 2.0, and AI governance standards.

The role involves stakeholder interviews, evidence-based reporting, and advisory work for executive leadership. Strong communication and analytical skills are essential for success in this client-facing environment.