Senior Governance, Risk and Compliance | CyberSecurity Consultant

Avertium; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

A cybersecurity consultancy in the United States is seeking a CyberSecurity Consultant to assist clients in delivering cybersecurity services. The role involves conducting assessments, developing strategies, and ensuring compliance with regulations such as GDPR and HIPAA. Candidates should have a degree in a related field and 3+ years of experience in cybersecurity. Strong problem-solving and communication skills are essential, along with relevant certifications. This position offers an opportunity to work in a dynamic and fast-evolving environment.

Qualifications

• 3+ years of experience in cybersecurity, IT audit, or a related role.
• Solid understanding of cybersecurity principles, technologies, and best practices.
• Familiarity with security frameworks and standards such as HITRUST, CMMC, NIST.

Responsibilities

• Conduct comprehensive cybersecurity assessments for clients.
• Develop and implement cybersecurity strategies aligned with business goals.
• Assist in achieving compliance with relevant regulations and standards.

Skills

Problem-solving

Analytical skills

Communication skills

Collaboration

Education

Bachelor's or master's degree in Computer Science, Information Security, or related field

Tools

Security assessment tools

Job description

Senior Governance, Risk and Compliance | CyberSecurity Consultant

Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid‑market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats.

Avertium is looking for a CyberSecurity Consultant that will be responsible for assisting in the delivery of cybersecurity services and solutions to clients. As a consultant, you will work closely with senior consultants and project teams to assess security risks, develop security strategies, implement controls, and provide guidance on improving clients’ cybersecurity posture. This role requires a solid understanding of cybersecurity principles, excellent problem‑solving skills, and the ability to communicate effectively with clients and team members.

Responsibilities

• Assist in conducting comprehensive cybersecurity assessments for clients, including vulnerability assessments, penetration testing, and risk assessments; identify security gaps, evaluate risks, and provide recommendations for remediation.
• Collaborate with project teams to develop and implement cybersecurity strategies that align with clients’ business goals and risk tolerance; assist in defining security frameworks, policies, and roadmaps.
• Assist in the implementation of security controls and technologies based on industry best practices and regulatory requirements, including configuring firewalls, intrusion detection systems, and encryption mechanisms.
• Help clients achieve and maintain compliance with relevant regulations and standards (e.g., GDPR, HIPAA, PCI‑DSS); collaborate with project teams to develop compliance frameworks, conduct gap assessments, and provide remediation recommendations.
• Document security procedures, processes, and findings; contribute to preparation of security assessment reports, project updates, and client presentations.
• Stay updated on the latest cybersecurity trends, threats, and technologies; conduct research on emerging security risks and contribute to internal knowledge‑sharing initiatives.
• Develop and maintain strong relationships with clients; provide timely and effective communication, manage client expectations, and ensure client satisfaction throughout the engagement.

Qualifications

• Bachelor’s or master’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in cybersecurity, IT audit, or a related role.
• Solid understanding of cybersecurity principles, technologies, and best practices.
• Familiarity with security frameworks and standards such as HITRUST, CMMC, NIST, ISO 27001, and PCI‑DSS.
• Knowledge of networking protocols, operating systems, and cloud platforms.
• Experience with security assessment tools and techniques.
• Strong problem‑solving and analytical skills.
• Excellent written and verbal communication skills.
• Ability to work effectively in a team and collaborate with cross‑functional stakeholders.
• Relevant certifications such as CISM, CISSP, CISA, HITRUST CCSFP/CHQP, CMMC CCP or RP, ISO Lead Auditor, MS SC‑400.
• Experience with Purview is preferred.