Senior Cyber Risk & Compliance Leader — Remote

ConsultNet Technology Services and Solutions; United States; A distancia; USD 103.000 - 117.000; A tiempo parcial

Descripción de la vacante

ConsultNet Technology Services and Solutions is seeking a Senior Cyber Risk & Compliance Analyst to strengthen cybersecurity governance, risk management, and compliance across the enterprise. This senior IC will combine deep GRC expertise with practical knowledge of infrastructure, applications, identity, cloud, and business processes.

You will translate vulnerabilities, audit findings, and regulatory requirements into defensible risk decisions, remediation roadmaps, and executive reporting,

Formación

• Bachelor's degree in cybersecurity, IT, CS, MIS or related field.
• 8+ years of progressive IT/cybersecurity, audit, risk, or compliance experience with hands-on technical responsibility.
• Progression from technical IT/security into governance, risk, compliance, audit, or leadership.
• Experience with ISO/IEC 27001 and NIST-based frameworks.
• Experience supporting internal/external IT/cybersecurity audits and evaluating control design/operating effectiveness including SOX ITGC.
• Experience managing vulnerability or penetration-testing findings through remediation.

Responsabilidades

• Lead cybersecurity risk assessments, maintain risk registers, and manage risk treatment plans and closure evidence.
• Administer and mature Drata or a comparable GRC platform, including controls, evidence, testing, ownership, workflows, and integrations.
• Support readiness and gap assessments across ISO/IEC 27001, TISAX, NIST CSF, and SOX ITGC and develop remediation roadmaps.
• Coordinate internal and external IT/cybersecurity audits and drive remediation.
• Coordinate penetration testing and remediation, validating severity and business impact.
• Develop and maintain cybersecurity policies, standards, procedures, control requirements, and framework mappings.
• Assess identity and access controls, provisioning/deprovisioning, change management, logging, monitoring, and recovery controls.
• Partner with infrastructure, cloud, and vendor teams to address high-risk findings and improve security posture.
• Perform cybersecurity reviews of technology providers and support third-party risk and resilience programs.
• Develop risk indicators, dashboards, and executive governance materials.

Conocimientos

GRC governance

ISO/IEC 27001

NIST CSF

SOX ITGC

Vulnerability management

Drata

Third‑party risk

Identity governance

Executive reporting

Cross‑functional collaboration

Educación

Bachelor's degree in cybersecurity / IT related field

Herramientas

Drata or other GRC platforms

Descripción del empleo

ConsultNet Technology Services and Solutions is seeking a Senior Cyber Risk & Compliance Analyst to strengthen cybersecurity governance, risk management, and compliance across the enterprise. This senior IC will combine deep GRC expertise with practical knowledge of infrastructure, applications, identity, cloud, and business processes.

You will translate vulnerabilities, audit findings, and regulatory requirements into defensible risk decisions, remediation roadmaps, and executive reporting,