Senior GRC Advisory Consultant - Remote

SHI; Bismarck (ND); Remote; USD 165,000 - 205,000; Full time

Benefits offered by this job

Diversity commitment

Professional growth

Health benefits

World-class facilities

Job summary

SHI is seeking a Senior Security Consultant - GRC to join our cybersecurity advisory practice. This client-facing role requires translating complex security and regulatory requirements into practical, business-ready outcomes and leading engagements with senior stakeholders.

The ideal candidate will develop governance models, security frameworks, and operating procedures, while mentoring others and driving practice growth.

Qualifications

• Completed Bachelor's degree in cybersecurity, information systems, risk management, business, or related field.
• 7+ years of experience in governance, risk, compliance required.
• Experience in cybersecurity advisory or internal audit in a client-facing professional services environment highly preferred.
• Experience working for a cybersecurity services provider, consulting firm, advisory practice, or professional services organization.
• Ability to travel to SHI, Partner, and Customer Events up to 10%
• Relevant industry certifications strongly preferred such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor.

Responsibilities

• Serve as a trusted advisor to clients on GRC, cybersecurity governance, and security program maturity.
• Lead and deliver client-facing consulting engagements independently, ensuring high-quality outcomes and alignment to client objectives.
• Conduct security assessments across governance, risk, compliance, and control effectiveness, aligned to industry frameworks and regulatory requirements.
• Facilitate risk assessments and tabletop exercises for enterprise, cyber, third-party, and incident response scenarios.
• Develop governance models, security frameworks, data governance blueprints, policies, standards, and operating procedures.
• Support clients with internal audit readiness, compliance reporting, evidence validation, remediation planning, and issue tracking.
• Collaborate with sales, technical teams, and peer practice leaders to identify client needs and support delivery.
• Contribute to practice growth by improving methodologies, staying current on industry trends, and mentoring other consultants.

Skills

GRC Advisory

Security Governance

Risk Assessments

Compliance Assessments

Regulatory Frameworks

ISO 27001

NIST

Data Modeling

GRC Tools

Education

Bachelor's degree in cybersecurity or related field

Equivalent practical experience

Tools

ServiceNow GRC

Archer

AuditBoard

LogicGate

OneTrust

Job description

SHI is seeking a Senior Security Consultant - GRC to join our cybersecurity advisory practice. This client-facing role requires translating complex security and regulatory requirements into practical, business-ready outcomes and leading engagements with senior stakeholders.

The ideal candidate will develop governance models, security frameworks, and operating procedures, while mentoring others and driving practice growth.