Senior Cybersecurity GRC & Privacy SME

Lever, Inc.; United States; Presencial; USD 140 000 - 200 000; Tempo integral

Resumo da oferta

CFGI is seeking a Cybersecurity GRC, Data Privacy & Technical Cybersecurity SME to lead strategic advisory engagements, strengthening clients' security governance, privacy programs, and technical security capabilities. This role blends hands-on delivery, executive communication, and practice leadership across PE deals and regulated environments.

You will translate complex risks into business impact, assess control designs, and collaborate with CISOs, CIOs, General Counsel and technology teams to

Qualificações

• 8+ years of relevant experience in cybersecurity GRC, technical risk, privacy, compliance, security consulting, or related areas.
• Experience implementing frameworks like NIST CSF, ISO 27001/27002, CIS Controls, SOC 2, CMMC, or comparable frameworks with privacy fundamentals.
• Working technical knowledge across at least four domains: cloud security; IAM/PAM; network security; endpoint security; vulnerability management; SIEM; incident response; application security; data protection; or backup and recovery.

Responsabilidades

• Lead end-to-end GRC and privacy engagements including scoping, planning, execution, and reporting.
• Design cybersecurity governance models: policies, standards, risk appetite, committees, KPIs, KRIs.
• Build enterprise risk programs with risk assessments, risk registers, control libraries, and testing approaches.
• Collaborate with CISOs, CIOs, CFOs, General Counsel, risk, and PE deal teams to drive outcomes.

Conhecimentos

GRC Expertise

Privacy Fundamentals

Regulatory Compliance

Executive Communication

Ferramentas

GRC Platforms

Privacy Management Tools

Descrição da oferta de emprego

CFGI is seeking a Cybersecurity GRC, Data Privacy & Technical Cybersecurity SME to lead strategic advisory engagements, strengthening clients' security governance, privacy programs, and technical security capabilities. This role blends hands-on delivery, executive communication, and practice leadership across PE deals and regulated environments.

You will translate complex risks into business impact, assess control designs, and collaborate with CISOs, CIOs, General Counsel and technology teams to