Principal/Senior Consultant, Governance, Risk & Compliance

🕒 vor 1 Monat

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟠 Senior

🚔 Compliance

👻 Geisterscore 18%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Pellera Technologies

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

🏢 Unternehmen

🔒 Cybersecurity

🤖 Künstliche Intelligenz

Enterprise • Cybersecurity • Artificial Intelligence

Pellera Technologies ist der führende Partner für Unternehmens-IT-Lösungen, entstanden aus der Fusion von Converge Technology Solutions und Mainline Information Systems. Pellera bietet End-to-End-Dienstleistungen für die digitale Transformation an – Beratung, Implementierung und Verwaltung – in Bereichen wie Künstliche Intelligenz und Analytik (einschließlich eines Data & AI Design Studios), Hybrid Cloud und App-Modernisierung (insbesondere IBM Power für Google Cloud/IP4G), Cybersicherheit, digitales Arbeiten, Managed Services und Lösungen für das Rechenzentrum der nächsten Generation. Das Unternehmen bedient große und mittelständische Kunden aus verschiedenen Branchen (Bankenwesen, Gesundheitswesen, Regierung, Fertigung, Einzelhandel, Transport) und berichtet über Skalendaten wie ~3. 200 Mitarbeiter, 4 Milliarden USD Umsatz (2024), über 1. 000 Technologiepartner, 4. 250 technische Zertifizierungen und mehr als 35 Jahre Erfahrung.

Beschreibung

• Lead complex client engagements from discovery and planning through assessment, reporting, and executive presentation • Conduct stakeholder interviews with executives, technology leaders, system owners, control owners, legal and compliance personnel, business leaders, and subject matter experts • Review policies, standards, procedures, system documentation, architecture diagrams, data flows, prior assessments, audit reports, control evidence, technical configurations, and other artifacts • Evaluate the design, implementation, and operating effectiveness of cybersecurity, privacy, resiliency, and technology controls • Identify control gaps, risks, exceptions, dependencies, and opportunities for improvement • Develop risk-based recommendations, remediation roadmaps, plans of action and milestones, maturity models, and prioritized implementation plans • Produce assessment reports, control workpapers, executive summaries, presentations, dashboards, and other audit-defensible deliverables • Present results to technical teams, executives, boards, auditors, assessors, and client stakeholders • Lead or support advisory, readiness, assessment, audit, and remediation services involving cybersecurity, privacy, cloud security, business continuity, third-party risk, and governance frameworks • Help clients establish or mature cybersecurity governance, enterprise risk management, control, compliance, privacy, and assurance programs • Develop cybersecurity strategies, target operating models, governance structures, policies, standards, procedures, and multi-year roadmaps • Support vCISO, vDPO, GRC-as-a-Service, and strategic program-management engagements • Facilitate risk, control, and governance workshops • Support executive and board-level reporting • Assist with audit preparation, regulatory inquiries, customer assurance requests, and third-party assessments • Advise on vendor risk management, mergers and acquisitions, security awareness, vulnerability-management governance, incident-response readiness, and cybersecurity investment priorities • Translate regulatory, contractual, risk, and control requirements into actionable guidance for technical and business teams • Assess controls across Azure, Microsoft 365, AWS, Google Cloud Platform, SaaS, on-premises, hybrid, and multi-cloud environments • Review technical evidence involving identity and access management, logging and monitoring, vulnerability management, endpoint protection, network security, encryption, data protection, backup and recovery, secure configuration, and incident response • Collaborate with Pellera specialists across technology and cybersecurity disciplines • Support cloud migration and modernization initiatives • Support pre-sales discovery, solution development, project scoping, estimation, proposal development, and client presentations • Contribute to methodologies, templates, accelerators, workpapers, delivery standards, service development, client education, and thought leadership • Mentor other consultants and identify legitimate follow-on opportunities

🎯 Anforderungen

• Fifteen or more years of progressively responsible experience across cybersecurity, information technology, governance, risk, compliance, internal audit, external audit, privacy, or related disciplines • Candidates with a compelling combination of consulting depth, framework expertise, technical knowledge, and leadership experience will also be considered • Experience working in a consulting, professional services, audit, advisory, or client-facing environment • Demonstrated ability to independently lead complex cybersecurity or GRC engagements • Broad knowledge of cybersecurity control frameworks, regulatory requirements, risk-management practices, and audit methodologies • Experience assessing control design and effectiveness, documenting evidence, developing findings, and presenting practical remediation recommendations • Strong understanding of IT general controls, control testing, risk assessment, audit evidence, and issue-remediation lifecycle management • Proven ability to write polished, accurate, executive-ready reports, presentations, policies, roadmaps, and other client deliverables • Strong verbal communication, interviewing, workshop-facilitation, and presentation skills • Ability to communicate equally well with executives, auditors, attorneys, compliance leaders, engineers, administrators, and business stakeholders • Ability to manage multiple client commitments, deadlines, dependencies, and competing priorities while maintaining delivery quality • Willingness to travel occasionally for client assessments and workshops • Authorization to work in the United States • Working knowledge of Azure, Microsoft 365, AWS, GCP, hybrid-cloud, SaaS, or on-premises enterprise environments • Experience examining technical configurations or evidence related to identity, network security, endpoint security, vulnerability management, logging, monitoring, encryption, data protection, backup, recovery, and cloud-security controls • Experience with Microsoft and AWS Commercial & Government Cloud environments, cloud-native security and governance tools, cloud-security posture management, data loss prevention, data classification, and multi-cloud architectures • Experience with GRC or integrated risk-management platforms such as ServiceNow GRC/IRM, Archer, OneTrust, Vanta, LogicGate, OpenPages, or comparable technologies • Experience developing cybersecurity metrics, KRIs, KPIs, dashboards, risk registers, control libraries, and executive or board reporting • Experience with AI governance, AI security, model risk, algorithmic transparency, data privacy, or responsible AI • Experience performing technical pre-sales, developing SOWs, estimating consulting effort, or supporting solution design • Experience serving clients in highly regulated industries • One or more preferred certifications, including CISA, CISM, CRISC, CISSP, CGRC, CCSP, PCI QSA, CMMC credentials, ISO/IEC 27001 Lead Auditor or Lead Implementer, HITRUST credentials, Microsoft Azure or AWS security certifications, or other relevant certifications

🏖️ Vorteile

• Remote work arrangement • Occasional travel coordinated in advance whenever practical • Opportunity to work across artificial intelligence, analytics, cloud, digital infrastructure, application modernization, digital workplace, data protection, offensive security, and managed services • Varied and substantive consulting work • Collaboration with specialists across cloud, digital workplace, data protection, cybersecurity engineering, artificial intelligence, infrastructure, and managed services