Principal/Senior Consultant, Governance, Risk & Compliance

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pellera Technologies

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏢 Enterprise

🔒 Cybersecurity

🤖 Artificial Intelligence

Enterprise • Cybersecurity • Artificial Intelligence

Pellera Technologies is the premier enterprise IT solutions partner formed by the merger of Converge Technology Solutions and Mainline Information Systems. Pellera delivers end-to-end digital transformation services—advising, implementing, and managing—across areas such as artificial intelligence and analytics (including a Data & AI Design Studio), hybrid cloud and app modernization (notably IBM Power for Google Cloud/IP4G), cybersecurity, digital workplace, managed services, and next‑gen data center solutions. The company serves large and mid‑market customers across industries (banking, healthcare, government, manufacturing, retail, transportation), and reports scale metrics such as ~3,200 employees, $4B revenue (2024), 1,000+ technology partners, 4,250 technical certifications, and 35+ years of experience.

📋 Description

• Lead complex client engagements from discovery and planning through assessment, reporting, and executive presentation • Conduct stakeholder interviews with executives, technology leaders, system owners, control owners, legal and compliance personnel, business leaders, and subject matter experts • Review policies, standards, procedures, system documentation, architecture diagrams, data flows, prior assessments, audit reports, control evidence, technical configurations, and other artifacts • Evaluate the design, implementation, and operating effectiveness of cybersecurity, privacy, resiliency, and technology controls • Identify control gaps, risks, exceptions, dependencies, and opportunities for improvement • Develop risk-based recommendations, remediation roadmaps, plans of action and milestones, maturity models, and prioritized implementation plans • Produce assessment reports, control workpapers, executive summaries, presentations, dashboards, and other audit-defensible deliverables • Present results to technical teams, executives, boards, auditors, assessors, and client stakeholders • Lead or support advisory, readiness, assessment, audit, and remediation services involving cybersecurity, privacy, cloud security, business continuity, third-party risk, and governance frameworks • Help clients establish or mature cybersecurity governance, enterprise risk management, control, compliance, privacy, and assurance programs • Develop cybersecurity strategies, target operating models, governance structures, policies, standards, procedures, and multi-year roadmaps • Support vCISO, vDPO, GRC-as-a-Service, and strategic program-management engagements • Facilitate risk, control, and governance workshops • Support executive and board-level reporting • Assist with audit preparation, regulatory inquiries, customer assurance requests, and third-party assessments • Advise on vendor risk management, mergers and acquisitions, security awareness, vulnerability-management governance, incident-response readiness, and cybersecurity investment priorities • Translate regulatory, contractual, risk, and control requirements into actionable guidance for technical and business teams • Assess controls across Azure, Microsoft 365, AWS, Google Cloud Platform, SaaS, on-premises, hybrid, and multi-cloud environments • Review technical evidence involving identity and access management, logging and monitoring, vulnerability management, endpoint protection, network security, encryption, data protection, backup and recovery, secure configuration, and incident response • Collaborate with Pellera specialists across technology and cybersecurity disciplines • Support cloud migration and modernization initiatives • Support pre-sales discovery, solution development, project scoping, estimation, proposal development, and client presentations • Contribute to methodologies, templates, accelerators, workpapers, delivery standards, service development, client education, and thought leadership • Mentor other consultants and identify legitimate follow-on opportunities

🎯 Requirements

• Fifteen or more years of progressively responsible experience across cybersecurity, information technology, governance, risk, compliance, internal audit, external audit, privacy, or related disciplines • Candidates with a compelling combination of consulting depth, framework expertise, technical knowledge, and leadership experience will also be considered • Experience working in a consulting, professional services, audit, advisory, or client-facing environment • Demonstrated ability to independently lead complex cybersecurity or GRC engagements • Broad knowledge of cybersecurity control frameworks, regulatory requirements, risk-management practices, and audit methodologies • Experience assessing control design and effectiveness, documenting evidence, developing findings, and presenting practical remediation recommendations • Strong understanding of IT general controls, control testing, risk assessment, audit evidence, and issue-remediation lifecycle management • Proven ability to write polished, accurate, executive-ready reports, presentations, policies, roadmaps, and other client deliverables • Strong verbal communication, interviewing, workshop-facilitation, and presentation skills • Ability to communicate equally well with executives, auditors, attorneys, compliance leaders, engineers, administrators, and business stakeholders • Ability to manage multiple client commitments, deadlines, dependencies, and competing priorities while maintaining delivery quality • Willingness to travel occasionally for client assessments and workshops • Authorization to work in the United States • Working knowledge of Azure, Microsoft 365, AWS, GCP, hybrid-cloud, SaaS, or on-premises enterprise environments • Experience examining technical configurations or evidence related to identity, network security, endpoint security, vulnerability management, logging, monitoring, encryption, data protection, backup, recovery, and cloud-security controls • Experience with Microsoft and AWS Commercial & Government Cloud environments, cloud-native security and governance tools, cloud-security posture management, data loss prevention, data classification, and multi-cloud architectures • Experience with GRC or integrated risk-management platforms such as ServiceNow GRC/IRM, Archer, OneTrust, Vanta, LogicGate, OpenPages, or comparable technologies • Experience developing cybersecurity metrics, KRIs, KPIs, dashboards, risk registers, control libraries, and executive or board reporting • Experience with AI governance, AI security, model risk, algorithmic transparency, data privacy, or responsible AI • Experience performing technical pre-sales, developing SOWs, estimating consulting effort, or supporting solution design • Experience serving clients in highly regulated industries • One or more preferred certifications, including CISA, CISM, CRISC, CISSP, CGRC, CCSP, PCI QSA, CMMC credentials, ISO/IEC 27001 Lead Auditor or Lead Implementer, HITRUST credentials, Microsoft Azure or AWS security certifications, or other relevant certifications

🏖️ Benefits

• Remote work arrangement • Occasional travel coordinated in advance whenever practical • Opportunity to work across artificial intelligence, analytics, cloud, digital infrastructure, application modernization, digital workplace, data protection, offensive security, and managed services • Varied and substantive consulting work • Collaboration with specialists across cloud, digital workplace, data protection, cybersecurity engineering, artificial intelligence, infrastructure, and managed services