Information Security Consultant

The Role The Information Security Consultant will serve as the resource for delivering eSentire’s Advisory Services to their assigned client(s). The primary responsibility of this role is to integrate advanced technical, regulatory, and operational expertise capabilities to deliver comprehensive information security programs, risk management strategies, and regulatory guidance to clients.  This individual will collaborate closely with peers on the Advisory Services team to develop and execute comprehensive security program roadmaps, as well as conduct individual assessments and deliver tailored services.  Additionally, this individual will be responsible for identifying opportunities to enhance brand and marketing recognition by pinpointing potential conferences, speaking engagements, and other relevant events.  This individual will also be responsible for conducting ongoing research and monitoring trends in the broader threat landscape to provide valuable support to the eSentire sales and delivery teams. Responsibilities  Provide expert consultation to clients and prospective clients to thoroughly understand and evaluate their information security program requirements. Deliver tailored recommendations that align with business objectives, regulatory standards, and contractual obligations. Formulate comprehensive security and cyber resilience strategies/roadmaps that are closely aligned with the client’s business objectives. Support the development of Incident Response Plans, Vendor Risk Management strategies, and Information Security Policies. Conduct Incident Response tabletop exercises by creating and moderating various hypothetical scenarios. Design, evaluate, and execute assessments and services in accordance with industry frameworks and compliance requirements. Develop security metrics and key performance indicators Translate complex technical findings into clear, actionable insights for non-technical stakeholders. Track ongoing program maturation progress with assigned client(s) Develop strategies to overcome or eliminate obstacles that may hinder effective security program delivery Stay updated on the latest security trends, threats, and best practices to inform presentations. Create and maintain client relationships, consistently searching for new, potential clients who may benefit from services and products provided Other duties shall be assigned as required Requirements Bachelor’s Degree equivalent required. (5 ) years of previous technical experience in secure engineering/system architecture. (5 ) years of previous experience with addressing governance, risk, and compliance objectives. (5 ) years of technology and/or information security management experience. Relevant certifications (e.g., CISSP, CISM) are a plus. Strong understanding of NIST CSF, ISO 27001, CIS, NIST 800-53, MITRE, PCI, HIPPA, SOC and other security & compliance frameworks Excellent written and verbal communication, listening, and client management skills. Demonstrated technical, regulatory, and operations management knowledge as well as consultative skills. Proven presentation skills. Self motivated, strong analytical skills and detail oriented. Goal oriented, with a proven history of meeting or exceeding client satisfaction expectations.  Occasional travel required. Capability to provide support across various time zones.