Primary Job Title:
Security Consultant
Alternate / Related Job Titles:
Information Security Consultant
ISO 27001 / ISO 42001 Consultant
Cybersecurity & Privacy Consultant
Risk, Compliance & Governance Consultant
AI Governance & Information Security Advisor
Location & Onsite Flexibility:
Remote — Alaska (AK)
Travel up to 33% as needed
Job Details (Direct Hire)
Position Type: Direct Hire
Start: As Soon As Possible
Salary Range: $125,000 – $150,000 per year
Role Overview
The Security Consultant supports clients in achieving and maintaining ISO certifications and advancing mature information security, privacy, and AI governance programs. This role plays a critical part in guiding organizations through certification readiness, audit preparation, and long-term program management across standards such as ISO 27001, 27701, 27017, and ISO/IEC 42001.
The consultant engages directly with clients, leads assessments and workshops, develops management system documentation, and contributes to ongoing business growth in a collaborative, entrepreneurial consulting environment.
Key Responsibilities
Client Engagement & Advisory
Partner with client leadership on all aspects of engagements, deliverables, and governance reviews
Lead client calls, presentations, onsite meetings, and serve as primary point of contact
Prepare executive-ready decks, reports, and meeting materials
Risk, Compliance & Certification Support
Conduct risk assessments, gap analyses, and stakeholder interviews
Assess practices and controls against ISO 27001, ISO 27701, ISO 27017, SOC 2, NIST, and ISO 42001
Support implementation of governance structures, controls, and management systems
Prepare clients for certification audits through evidence review and readiness validation
Provide audit support, including onsite participation when required
Documentation & Program Management
Develop and review policies, procedures, standards, and guidance documents
Create and maintain project plans, milestones, and accountability structures
Communicate progress, risks, and dependencies clearly with clients and internal teams
Continuous Improvement & Growth
Maintain awareness of evolving information security, privacy, and AI regulations
Support AI governance initiatives, impact assessments, and responsible AI frameworks
Identify and develop new business opportunities within existing client relationships
Coach and mentor team members as needed
Required Skills & Qualifications
Education
Experience
5+ years of progressive experience in information security, privacy, risk, compliance, or IT audit
Proven experience delivering consulting projects with minimal oversight
Required Expertise
Advanced knowledge of information security frameworks and controls
Hands-on experience with ISO 27001 and related standards (27701, 27017), SOC 2, and NIST
Strong understanding of privacy regulations including GDPR and CCPA/CPRA
Excellent written communication skills for executive and technical audiences
Strong analytical, problem-solving, and presentation skills in client-facing environments
Preferred / Nice-to-Have Qualifications
Experience with ISO/IEC 42001, AI risk assessments, and AI governance programs
Knowledge of global AI regulations such as the EU AI Act
Experience authoring and facilitating tabletop exercises and scenario-based incident or AI event simulations
Relevant certifications such as:
Additional Skills & Abilities
Strong leadership and executive presence
Superior verbal and written communication skills
Advanced proficiency with Microsoft Office tools
Experience leveraging GenAI tools to improve consulting deliverables
High attention to detail and discretion with confidential information
Ability to manage multiple priorities in a deadline-driven environment
Skilled at influencing, negotiating, and managing organizational change
Ability to build and maintain trusted client relationships
About the Company
Our client is a leading provider of information security, data privacy, and business continuity advisory services. With a near 100% certification success rate, the organization helps clients mitigate cyber risk, achieve audit readiness, and build resilient, standards-based management systems that deliver long-term value and zero non-compliance outcomes.
About GTT
GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company based in Alaska. We proudly support diverse and inclusive workplaces and partner with Fortune 500 financial services, technology, life sciences, biotech, utility, and retail organizations across the U.S. and Canada.
Job Number: 26-01115