Security Solutions Consultant - Cyber Risk and Strategy

Qualifications:

Required

• 2 to 4 years of experience in cybersecurity, IT risk, IT audit, or compliance, with practical exposure to at least one GRC domain (risk management, compliance program management, policy governance, or third party risk)

• Experience supporting GRC work in one or more of the following areas:

• Risk Management: IT risk assessment support, risk register maintenance, qualitative risk scoring, and risk treatment tracking

• Compliance Program Management: gap assessment support, controls mapping, audit readiness activities, evidence collection, and remediation tracking against frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, or SOX ITGC

• Policy & Control Governance: policy review and update cycles, mapping controls to frameworks (NIST, CIS, ISO), control testing support, and policy exception tracking

• Third Party & Vendor Risk: vendor assessment questionnaire administration, review of vendor responses and evidence, risk tiering support, and remediation tracking

• GRC Platforms: ServiceNow GRC, Archer, OneTrust, Vanta, Drata, or equivalent, as an end user or administrator maintaining records, running assessments, or building reports

• Foundational knowledge of common GRC and security frameworks, such as NIST CSF 2.0, NIST SP 800-53, ISO 27001/27002, CIS Controls v8, SOC 2 Trust Services Criteria, PCI DSS v4, HIPAA Security Rule, and SOX ITGC

• Understanding of core GRC concepts: risk identification and scoring, control design vs. control effectiveness, separation of duties, three lines of defense, the audit lifecycle, and data privacy principles

• Strong proficiency with Microsoft Excel, PowerPoint, and Word

Foundational consulting delivery competencies, including:

• Structured discovery: ability to support discovery interviews, take thorough notes, gather documentation and evidence, and organize information into clear, structured outputs
• Gap analysis: ability to compare documented controls and practices against framework requirements and clearly document gaps for team review
• Technical communication: ability to draft clear, accurate written findings and summaries, and to communicate status and questions concisely to the engagement team and client counterparts
• Workshop support: participate in discovery sessions, risk workshops, and working group meetings; help prepare materials and capture decisions and action items
• Deliverable quality: strong attention to detail and a track record of producing accurate, clearly organized work products on time and to standard
• Engagement collaboration: work effectively within project teams; communicate progress and blockers proactively to the engagement lead; adapt to shifting priorities and client needs

Preferred

• Bachelor's degree in Information Security, Risk Management, Business, or a related field
• Industry certifications demonstrating security or GRC knowledge, such as Security+, ISC2 CC, SSCP, GRCP, or equivalent; progress toward CISA, CRISC, CISM, or CISSP is a plus, as are platform certifications from ServiceNow, OneTrust, or Archer
• Exposure to enterprise environments in financial services, healthcare, retail, manufacturing, or public sector, particularly where compliance is shaped by regulatory requirements (SOX, HIPAA, PCI DSS, DORA, FedRAMP)
• Prior experience at a professional services firm, audit firm, or systems integrator, or within an internal audit or compliance function
• Familiarity with additional frameworks and methods such as NIST RMF, COBIT, FedRAMP, DORA, or FAIR risk quantification

Key Competencies

• Foundational GRC knowledge and reliable execution of assigned work
• Attention to detail, delivery quality, and individual accountability
• Clear written and verbal communication
• Coachable, collaborative team contributor with a strong growth orientation

Success in this role means completing assigned GRC work accurately and on time, earning the trust of engagement leads and client teams through reliable performance, rapidly building domain knowledge and consulting skills, and contributing to a practice that clients trust and return to while building toward the skills and experience required to step into a Senior Consultant role.

Want to learn more about Consulting & Security Services? Check us out on our platform:

https://www.wwt.com/consulting-services

https://www.wwt.com/category/security-transformation

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $82,800 to $103,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. When it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program

Note: This is not an all-encompassing list and should not be used as a complete description of the plan's benefits. For more information, see our US benefits website at wwt.com/us-benefits.

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT

remains a great place to work for all!

If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process.

World Wide Technology is an Equal Opportunity Employer.

If you have any questions or concerns about this posting, please email taposting@wwt.com.

#LI-TB1