Senior Security Advisor - GRC

Soteria - Security Solutions & Advisory; United States; Remote; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Soteria - Security Solutions & Advisory is seeking a Senior Security Advisor to lead complex risk and compliance engagements for a growing client roster. You will drive SSP development, regulatory mapping, and policy creation, while mentoring teammates and guiding clients toward stronger security postures.

The role emphasizes deep technical grounding, strong judgment, and proactive client communication, with remote work flexibility and occasional travel for client engagements as needed.

Qualifikationen

• 10+ years of cybersecurity experience, with focus on governance, risk, and compliance.
• Leadership experience advising clients and teams on security programs.
• Experience authoring System Security Plans and RMF/ATO-style processes.
• Knowledge of HIPAA, PCI-DSS, CMMC, GDPR, CCPA and similar regulations.
• Certifications such as CISSP, CISM, CISA, CEH are a plus.

Aufgaben

• Lead complex risk and compliance engagements for multiple clients.
• Develop engagement plans and action items to strengthen client security postures.
• Create, review, and maintain SSPs and security documentation.
• Present findings to C-Suite and boards in a professional manner.
• Mentor junior advisors and contribute to business development.

Kenntnisse

GRC expertise

Security leadership

Client relationship management

Regulatory compliance knowledge

Documentation & policy writing

Executive communication

Jobbeschreibung

About the role

As a Senior Security Advisor at Soteria, you will bring seasoned GRC expertise to a fast‑paced team serving a growing roster of clients navigating today’s threat landscape. This role calls for authenticity, engagement, curiosity, and care reflected in every client interaction. Exercising sound judgment with minimal direction, you will lead complex risk and compliance engagements, guiding clients toward stronger security postures, delivering polished, timely, well‑documented findings.

Success here requires deep technical grounding, paired with strong judgment, operating with minimal oversight, and client relationship management skills. You will lead multiple engagements at once, mentor junior advisors, adapt quickly, maintain the highest quality under tight deadlines.

What you’ll do

• Communicate with prospective and existing clients to understand their security needs and develop engagement plans to satisfy their requirements.
• Develop an understanding of the business requirements and other motivating factors for clients.
• Lead and perform security assessments to help organizations understand where gaps exist within their security programs.
• Lead development of System Security Plans (SSPs) end to end, including control selection, implementation statements, system categorization, stakeholder coordination through approval.
• Identify cybersecurity‑related regulatory requirements (e.g., PCI‑DSS, HIPAA, CCPA, GDPR, NYDFS) as well as gaps in compliance, and develop strategic plans to achieve and maintain compliance.
• Develop and review policies, procedures, and other related documentation to establish a documented security program.
• Work closely with Customers and the Soteria team to develop plans of action for clients to ensure they achieve their desired outcomes.
• Document and present findings and recommendations to clients, including C‑Suite and board‑level executives, in a professional manner.
• Maintain relationships with clients post‑assessment in order to assist and advise as they continue to build and improve their security.
• Maintain competence in security trends, technologies, and practices through self‑study and attendance of industry events.
• Train and mentor other employees in order to build the company’s overall capacity and capability.
• Work with Soteria leadership to develop, achieve, and enhance the revenue goals.
• Provide Soteria Finance the data, reports, and project updates as required by clients, Soteria leadership, and business associates.
• Effectively manage all Advisory projects, ensuring professional and proactive client communication is maintained by all Advisors and that client expectations are always met
• Perform business development tasks from the initial call with a referral or repeat client, through the proposal stage, and finally, to contract execution.

Qualifications

• 10+ years of industry experience with a deep understanding of the cybersecurity space
• Prior experience in a cybersecurity consulting role
• Prior experience in a cybersecurity leadership role
• Prior experience authoring System Security Plans, supporting RMF or ATO‑style processes.
• Knowledge and understanding of common regulatory and compliance requirements such as HIPAA, PCI‑DSS, CMMC, GDPR, etc.
• Relevant certifications such as CISSP, CISM, CISA, CEH, etc.

Hours of Operation:

• Soteria is a remote workforce with flexibility in scheduling. The majority of work time will be 9:00 AM EST to 5:00 PM EST.

This is a remote position; however, occasional travel may be required for client engagements, team meetings, or other business needs.