Cybersecurity Consultant - Governance, Risk, and Compliance

## Description

Position/Salary: Cybersecurity Consultant – Governance, Risk, and Compliance.

Go Security Pro is seeking to add a full-time cybersecurity consultant for our Governance, Risk, and Compliance (GRC) consulting practice. The ideal candidate will have a technical background, with real-world IT departmental experience, who is already in cybersecurity or interested in moving into cybersecurity. We’re committed to valuing your experience, and we know our clients will too. In this role, you will participate in a variety of projects with clients across industries, gain valuable insights on a new cybersecurity career path, and stay on the cutting edge of technology to provide high-quality risk management services. As training is one of our core values, we invest in our employees. This position will be an excellent opportunity for career growth, working alongside our risk management team with deep cybersecurity risk management experience that they’re eager to share with you. We expect our employees to work hard, meet established performance benchmarks, maintain a high level of professionalism, and be a team player.

Salary Range: $60,000-$90,000 depending on experience.

This position is not fully remote. While the role is centered in Tulsa, Oklahoma, candidates within approximately two hours of driving distance (including Oklahoma City, Northwest Arkansas, and nearby areas) may be considered, with an expectation of regular onsite presence as business needs require. Minimal travel required, up to 25%.

Anticipated Skills

• Participate in and eventually lead highly technical configuration security hardening reviews, serve as an advisor to our clients, and leverage valuable technical experience in determining client-specific recommendations to resolve risks.
• Assist with, provide technical expertise for, and grow to lead risk assessments (client or third-party) and audits.
• Evaluate complex and unique client environments for a variety of consulting needs
• Develop security program documentation (e.g., policies and procedures) for clients across industries.
• Strong communication skills with the ability to lead face-to-face meetings with clients, manage customer relationships, and maintain high customer satisfaction, while always maintaining professionalism.
• Strong writing skills for delivering impactful reports to clients. While we have many tools to ensure success, writing is an essential function of this role, including drafting assessment reports, accurately capturing risk details, creating actionable recommendations, and drafting cybersecurity plans for clients. Audiences for our deliverables include both IT personnel and non-technical business leadership, and our written deliverables accommodate both audiences.

PLEASE NOTE: To demonstrate you have read this job description and facilitate an evaluation of your writing style, please include with your application a cover letter which explains your personal connection to Oklahoma and why you believe you are a good fit for this position.

• Strong project management skills, including effectively identifying and communicating needs for project success, project obstacles and project risks. The candidate will work on many projects simultaneously, while ensuring project objectives are delivered on time and meet company and client expectations for quality

Anticipated Professional Qualities

• Thrive and learn from on-the-job training/shadowing, writing sessions, and collaborative editing processes. The GRC team works collaboratively to ensure client needs are anticipated and GO services are of the highest quality.
• Ability and enthusiasm to provide support in other areas of consulting including incident response, technical testing, systems configurations, public speaking, webinar participation, blog content development, and sales assistance.
• Maintain a professional demeanor that helps elevate the corporate brand.
• An aptitude and interest in quickly obtaining cybersecurity certifications.

Please demonstrate you have read this job description by including with your application a cover letter which explains your personal connection to Oklahoma and why you believe you are a good fit for this position.

## Qualifications

Preferred Education and Work Experience

• At least one (1) year **minimum** prior work experience within or adjacent to an enterprise IT departmental role. Preferred areas of IT experience include, and are not limited to, network operations, server administration, database administration or multiple years (2+) in helpdesk.
• The ideal candidate will have a bachelor’s or associate’s degree in a technical subject matter, the aptitude for quickly learning, and a strong work ethic.
• Relevant IT and security certifications are preferred.
• Highly desired work experience includes:
• Experience in a large enterprise IT department
• Experience in multiple different areas of IT
• Experience in a highly standardized or regulated IT environment, including compliance requirements such as NIST, HIPAA, CMMC, FTC Safeguards, and PCI DSS.
• Exposure to cybersecurity or audit practices from an IT role

Benefits: We offer a rich healthcare package that includes vision, dental, life, and eleven company paid holidays, as well as sick and annual leave.

Contingencies: This offer is contingent based on the following

1. Successful completion of your background check and I-9 employment verification.
2. Proof of your right to work in the U.S., as required by law.
3. Signing our confidentiality and nondisclosure agreement as well as acknowledgement of receipt of all company policies.
4. Reference Checks.

Other Terms

• Employment will be subject to the company’s policies and procedures as adopted, revised, or deleted from time to time.
• Unauthorized use of confidential information of prior employers or any other third parties is prohibited.
• Any employment restrictions such as non-competition or non-solicitation agreements with former employers must be disclosed prior to accepting employment.
• This position is exempt for overtime purposes.