Cybersecurity and Compliance Consultant Key Responsibilities
Lead or contribute to cybersecurity, information security, risk, compliance, and data privacy programs or projects, ensuring alignment with organizational and regulatory objectives.
Design and implement compliance frameworks, regulatory mappings, and risk remediation strategies to address audit findings or regulatory requirements.
Develop roadmaps to mature cybersecurity, risk, and compliance programs, including control design and process enablement for areas like ERP, identity management, and cloud security.
Manage readiness initiatives for new laws, regulations, or certifications, coordinating with technical, business, compliance, and audit teams.
Oversee risk, compliance, or information security reporting and monitoring, delivering actionable insights to stakeholders.
Facilitate change management for regulatory adoption or compliance transformations, ensuring smooth transitions across business units.
Conduct or support internal/external audits, leveraging expertise in audit readiness and regulatory compliance.
Collaborate with cross-functional teams to deliver solutions across lines of defense, integrating technical and business perspectives.
Apply knowledge of GRC and cybersecurity tools to enhance program effectiveness and compliance processes.
Contribute to internal initiatives, such as business development, training, or process improvements, to support organizational growth. Required Skills and Qualifications Cybersecurity and Compliance Expertise (50%)
8+ years of experience in cybersecurity, information security, risk, compliance, or data privacy programs or projects.
Proven expertise in compliance framework mapping, regulatory implementation, or audit/risk remediation management.
Knowledge of industry regulations and standards, such as EU-GDPR, CCPA/CPRA, HIPAA, PCI, COSO, NIST, or ISO.
Experience managing or supporting regulatory audits or certification readiness initiatives.
Familiarity with GRC and cybersecurity solutions, tools, and technologies for control design and monitoring. Leadership and Collaboration (50%)
Demonstrated ability to lead or coordinate cross-functional teams, working with technical, business, compliance, and audit stakeholders.
Strong written and verbal communication skills to articulate complex concepts and deliver presentations to diverse audiences.
Proven track record of solving business problems and delivering results in high-demand environments.
Ability to work across industries, roles, and technologies, adapting to varied project requirements.
Experience with change management, roadmap development, or maturing cybersecurity and compliance programs. Additional Considerations
Experience with state or government cybersecurity, risk, or compliance projects, particularly in healthcare or public sector contexts, is highly valued.
A bachelor s degree in a relevant field (e.g., Cybersecurity, Information Systems, Business) is preferred.
Certifications such as CIPP, CRCM, CRM, ARM, CISSP, or CISM are a plus.
Familiarity with Agile methodologies or cloud security practices is advantageous.
Candidates must be located within 20 miles of Boston to support occasional onsite collaboration. Why Join Us?
This role offers an opportunity to lead impactful cybersecurity and compliance initiatives in a dynamic, client-focused environment. You ll work with cutting-edge GRC tools and regulatory frameworks, collaborate with diverse teams, and contribute to a forward-thinking organization dedicated to delivering innovative solutions and fostering professional growth.
What is a Pipeline Job?
These roles represent future opportunities we've uncovered through our client discussions. We have stripped away the rigid Must Haves, Mandatories, and Required criteria to find the right fit for their needs. By applying for these future roles, we will complete our human-centered process to see if you are a fit while adding your profile to our database to be considered for additional openings. When you apply, rest assured a human will thoroughly review your resume and respond to you personally. We take pride in finding the right match for each job, valuing your unique talents and potential over just what's on your resume.