Security & Compliance Consultant

About BreachLock

• BreachLock Inc. is a global leader in automated penetration testing services, offering cutting-edge Web, Network,
• and API Pen Testing solutions. Our proprietary technology and expertise have earned the trust of over 1,200 clients
• worldwide. We thrive on innovation, collaboration, and delivering exceptional results that redefine cybersecurity
• standards.

Role Overview

• We are looking for a detail-oriented Security & Compliance Consultant to support our Security & Compliance
• function. The ideal candidate will assist with compliance operations, audit readiness, and contract review, while
• building a strong understanding of security frameworks and emerging areas such as AI governance. You will work
• closely with the Security & Compliance team and collaborate with cross-functional teams.

• Support the review of contracts and related documents, flagging risks for escalation where needed.
• Assist in maintaining compliance readiness against recognized security and privacy frameworks.
• Support internal and external audits, including evidence collection and coordination.
• Help monitor and track compliance controls across the organization.
• Assist with endpoint security monitoring, using an understanding of endpoint detection and response (EDR) tools and concepts.
• Support security awareness initiatives, including training content and internal communications.
• Contribute to periodic security and compliance reporting for leadership.
• Maintain accurate and organized compliance documentation.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field; candidates with strong practical experience in lieu of a formal degree will also be considered.
• 1–3 years of experience in compliance, GRC, or a related security function.
• Working knowledge of at least one security framework, such as SOC 2, ISO 27001, ISO 42001, or NIST.
• Basic understanding of endpoint detection and response tools and concepts.
• Strong written communication skills, with the ability to summarize risk clearly for non-technical stakeholders.
• Ability to work cross-functionally across teams.

Preferred Qualifications

• Prior exposure to contract or document review.
• Interest or working knowledge in AI governance and how AI relates to cybersecurity and compliance.
• Relevant certifications or training, such as ISO 27001 Lead Auditor/Implementer, CISA etc, completed or in
• progress.
• Mentorship from experienced Security & Compliance professionals.

• ● Exposure to real-world audits and enterprise compliance operations.
• ● A growth path toward broader GRC and compliance management roles.
• ● Support for relevant certifications and professional development.