Senior GRC Security Consultant — Remote Advisory

SHI; Annapolis (MD); Remote; USD 165,000 - 205,000; Full time

Benefits offered by this job

Diversity and inclusion

Professional growth opportunities

Health, wellness and financial benefi

Hybrid/remote work options

Job summary

SHI International Corp. is seeking a Senior Security Consultant - GRC to join our cybersecurity advisory practice.

This is a client-facing consulting role for an experienced, hands-on professional who can hit the ground running, lead engagements, and serve as a trusted advisor to clients. The ideal candidate will bring a strong consulting presence and the ability to translate complex security and regulatory requirements into practical, business-aligned outcomes.

Qualifications

• Expertise in developing governance models, security frameworks, policies, standards, and operating procedures.
• Proficiency with cloud security frameworks, compliance standards, and governance models.
• Familiarity with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust.
• Ability to oversee and direct projects to completion, ensuring goals are met, resources are utilized efficiently, and stakeholders are satisfied.
• Ability to examine, clean, transform, and model data to discover useful information, draw conclusions, and support decision-making.
• The ability to effectively utilize applications like Word, Excel, PowerPoint, and Outlook to enhance productivity and perform various tasks efficiently.
• Practical experience in GRC advisory services, including security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews.
• Working knowledge of common frameworks and standards such as NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA.

Responsibilities

• Serve as a trusted advisor to clients on GRC, cybersecurity governance, and security program maturity.
• Lead and deliver client-facing consulting engagements independently, ensuring high-quality outcomes and alignment to client objectives.
• Conduct security assessments across governance, risk, compliance, and control effectiveness, aligned to industry frameworks and regulatory requirements.
• Facilitate risk assessments and tabletop exercises, including enterprise, cyber, third-party, and incident response scenarios for technical and executive stakeholders.
• Develop governance models, security frameworks, data governance blueprints, policies, standards, a operating procedures.
• Support clients with internal audit readiness, compliance reporting, evidence validation, remediation planning, and issue tracking.
• Collaborate with sales, technical teams, and peer practice leaders to identify client needs, recommend solutions, and support successful delivery.
• Contribute to practice growth by improving methodologies, staying current on industry trends, optimizing cross-practice capabilities, and mentoring other consultants.

Skills

GRC governance

Security frameworks

Regulatory compliance

Data modeling

Office productivity

GRC platforms

Project leadership

Analytical thinking

Critical thinking

Technical troubleshooting

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

AuditBoard

LogicGate

OneTrust

Job description

SHI International Corp. is seeking a Senior Security Consultant - GRC to join our cybersecurity advisory practice.

This is a client-facing consulting role for an experienced, hands-on professional who can hit the ground running, lead engagements, and serve as a trusted advisor to clients. The ideal candidate will bring a strong consulting presence and the ability to translate complex security and regulatory requirements into practical, business-aligned outcomes.