Lead Security Solutions Consultant - Cyber Risk and Strategy

Qualifications:

Required

• 7-12 years of experience in cybersecurity, IT risk, compliance, or security advisory with a clear focus on GRC; must include significant hands-on experience across at least three GRC domains and demonstrated ownership of client-facing workstreams

• Advanced hands-on experience across GRC domains and platforms, including multiple areas such as:

• Risk Management - enterprise and IT risk assessments, risk methodology design, risk register governance, risk appetite and tolerance, qualitative or FAIR-based quantification, treatment planning, KRI design, and executive risk reporting

• Compliance Program Management - complex regulatory and framework gap assessments, controls mapping, audit and certification readiness, evidence and remediation governance, and sustainable compliance operating models across frameworks such as SOC 2, ISO 27001, FedRAMP, HIPAA, PCI DSS, DORA, or SOX ITGC

• Policy & Control Governance - enterprise policy and standards development, control framework design and rationalization, control testing methodology, exception governance, control ownership models, and integration of NIST, CIS, ISO, or similar frameworks

• Third-Party & Vendor Risk - program design, vendor segmentation and tiering, inherent and residual risk methods, assessment and contractual control review, issue remediation, ongoing monitoring, and governance reporting

• GRC Platforms - ServiceNow GRC, Archer, OneTrust, Vanta, Drata, or equivalent: experience translating process requirements into workflows, data models, reporting, dashboards, assessment structures, or platform-enabled operating processes

• Strong working knowledge of GRC and security frameworks: NIST CSF 2.0, NIST SP 800-53, NIST RMF, ISO 27001/27002, CIS Controls v8, SOC 2 Trust Services Criteria, COBIT, PCI DSS v4, HIPAA Security Rule, SOX ITGC, FedRAMP, and DORA

• Advanced understanding of core GRC concepts: risk appetite and tolerance, control design and operating effectiveness, three lines of defense, audit lifecycle, regulatory change management, data privacy principles, governance operating models, and risk-based prioritization

Demonstrated consulting leadership competencies, including:

• Structured discovery: ability to design and lead current-state discovery across multiple stakeholder groups, identify information gaps, challenge assumptions constructively, and synthesize complex evidence into a coherent view of risk and program maturity
• Gap analysis: experience leading maturity and control assessments, calibrating findings, determining root causes, prioritizing gaps by risk and business impact, and converting analysis into practical recommendations and roadmaps
• Executive and technical communication: ability to translate complex risk and compliance topics into clear written deliverables, presentations, and verbal recommendations for technical teams, business stakeholders, project sponsors, and senior leaders
• Workshop facilitation: ability to independently plan and facilitate discovery sessions, risk workshops, prioritization discussions, and working groups; manage differing viewpoints and guide stakeholders toward decisions and next steps
• Deliverable leadership: consistent track record of owning high-quality client deliverables from analysis through final presentation, including quality review of team outputs and accountability for consistency, clarity, and defensibility
• Engagement leadership: direct day-to-day workstream execution, coordinate team activities, manage dependencies and delivery risks, mentor junior staff, and partner effectively with the engagement lead to maintain scope, quality, and client confidence

Preferred

• Bachelor's degree in Information Security, Risk Management, Business, or a related field
• Industry certifications demonstrating advanced GRC or security knowledge: CISSP, CISM, CISA, CRISC, CGEIT, GRCP, or equivalent; platform certifications from ServiceNow, OneTrust, or Archer are a strong plus
• Experience leading GRC work in complex enterprise environments across financial services, healthcare, retail, manufacturing, or public sector, particularly where compliance intersects with significant regulatory scrutiny
• Substantial consulting experience at a professional services firm, systems integrator, audit/advisory firm, or equivalent client-facing role, including responsibility for workstream leadership and client presentations
• Experience supporting pre-sales and solution shaping, including discovery, SOW development, effort estimation, staffing models, proposal creation, and transition from pursuit to delivery

Key Competencies

• Broad GRC domain depth and independent workstream leadership
• Client advisory judgment, delivery quality, and accountability for outcomes
• Strong executive and technical communication, written and verbal
• Team leadership, coaching, collaboration, and commercial awareness

Success in this role means independently leading complex GRC workstreams from discovery through recommendation, earning trusted-advisor credibility with client stakeholders, consistently delivering high-quality outcomes through both individual contribution and team leadership, strengthening the practice through coaching and reusable intellectual capital, and demonstrating the delivery, client, and commercial judgment required to progress toward a Principal or Senior Manager role.

Want to learn more about Consulting & Security Services? Check us out on our platform:

https://www.wwt.com/consulting-services

https://www.wwt.com/category/security-transformation

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $137,200 to $171,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. When it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program

Note: This is not an all-encompassing list and should not be used as a complete description of the plan's benefits. For more information, see our US benefits website at wwt.com/us-benefits.We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT

remains a great place to work for all!

If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process.

World Wide Technology is an Equal Opportunity Employer.

If you have any questions or concerns about this posting, please email taposting@wwt.com.

#LI-TB1