Sr. Security Consultant - GRC

About Us

Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services.

 

Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 7,000 of them. If you join our team, you’ll enjoy:

• Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.

• Continuous professional growth and leadership opportunities.

• Health, wellness, and financial benefits to offer peace of mind to you and your family.

• World-class facilities and the technology you need to thrive – in our offices or yours. 

Job Summary

We are seeking a Senior Security Consultant – GRC to join our growing cybersecurity advisory practice. This is a client-facing consulting role for an experienced, hands-on professional who can hit the ground running, lead engagements, and serve as a trusted advisor to clients. The ideal candidate will bring a strong consulting presence and the ability to translate complex security and regulatory requirements into practical, business-aligned outcomes.
The ideal candidate will help develop governance models and security frameworks, deliver high-quality consulting services, and collaborate with Sales, Account Executives, Project Managers and other key stakeholders to support successful client outcomes. This individual will also identify opportunities for improvement, contribute to practice growth, stay current on industry trends, and mentor other consultants.
We are looking for a proactive, polished, and business-minded consultant with strong client-facing skills, broad GRC experience, and the ability to contribute to both service delivery and practice expansion.
This position is a remote position with Home Office setup as determined by SHI management.

Role Description

• Serve as a trusted advisor to clients on GRC, cybersecurity governance, and security program maturity.
• Lead and deliver client-facing consulting engagements independently, ensuring high-quality outcomes and alignment to client objectives.
• Conduct security assessments across governance, risk, compliance, and control effectiveness, aligned to industry frameworks and regulatory requirements.
• Facilitate risk assessments and tabletop exercises, including enterprise, cyber, third-party, and incident response scenarios for technical and executive stakeholders.
• Develop governance models, security frameworks, data governance blueprints, policies, standards, a operating procedures.
• Support clients with internal audit readiness, compliance reporting, evidence validation, remediation planning, and issue tracking.
• Collaborate with sales, technical teams, and peer practice leaders to identify client needs, recommend solutions, and support successful delivery.
• Contribute to practice growth by improving methodologies, staying current on industry trends, optimizing cross-practice capabilities, and mentoring other consultants.

Behaviors and Competencies

• Communication: Can effectively communicate complex ideas and information to diverse audiences, facilitate effective communication between others, and mentor others in effective communication.
• Relationship Building: Can take ownership of complex team initiatives, collaborate with diverse groups, and drive results through effective relationship management.
• Self-Motivation: Can take ownership of complex personal or professional initiatives, collaborate with others when necessary, and drive results through self-motivation.
• Negotiation: Can take ownership of complex negotiations, collaborate with others, and drive consensus.
• Impact and Influence: Can rally a team or group towards a common goal, creating a positive and persuasive influence.
• Business Development: Can take ownership of significant business initiatives, collaborate with various stakeholders, and drive business results.
• Emotional Intelligence: Can use emotional information to guide thinking and behavior, manage and/or adjust emotions to adapt to environments or achieve one’s goal(s), and help others do the same.
• Detail-Oriented: Can oversee multiple projects, maintaining a high level of detail orientation, identifying errors or inconsistencies in work, and ensuring accuracy across all tasks.
• Follow-Up: Can take ownership of tasks, collaborate with others in managing follow-ups, and drive results through effective task completion.
• Presenting: Can effectively use visual aids, storytelling, and persuasive techniques to enhance presentations and engage audiences.
• Delegation: Can delegate responsibilities across a team, balancing workload, and ensuring all members understand their roles.
• Analytical Thinking: Can use advanced analytical techniques to solve complex problems, draw insights, and communicate the solutions effectively.
• Critical Thinking: Can integrate and synthesize information from various sources to inform strategic decision-making and problem-solving.
• Technical Troubleshooting: Can take ownership of complex technical problems, collaborate with others to manage solutions, and drive results in problem resolution.

Skill Level Requirements

• Expertise in developing governance models, security frameworks, policies, standards, and operating procedures. - Expert
• Proficiency in implementing and managing cloud security frameworks, compliance standards, and governance models - Expert
• Familiarity with GRC platforms and tools such as ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust, or similar solutions. - Expert
• Ability to oversee and direct projects to completion, ensuring goals are met, resources are utilized efficiently, and stakeholders are satisfied - Expert
• Ability to examine, clean, transform, and model data to discover useful information, draw conclusions, and support decision-making - Expert
• The ability to effectively utilize applications like Word, Excel, PowerPoint, and Outlook to enhance productivity and perform various tasks efficiently. - Expert
• Practical experience in GRC advisory services, including security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews. - Expert
• Working knowledge of common frameworks and standards such as NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA. - Expert

Other Requirements

• Completed Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or equivalent practical experience
• 7+ years of experience in governance, risk, compliance required
• Experience in cybersecurity advisory or internal audit in a client-facing professional services environment highly preferred
• Experience working for a cybersecurity services provider, consulting firm, advisory practice, or professional services organization
• Ability to travel to SHI, Partner, and Customer Events up to 10%
• Relevant industry certifications strongly preferred such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor

The estimated annual pay range for this position is $165,000 - $205,000 which includes a base salary and bonus. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.

Equal Employment Opportunity – M/F/Disability/Protected Veteran Status