Security Consultant

Job Summary

Our client has built a strong reputation in the field and are known for guiding clients toward attaining and maintaining ISO certifications, in particular ISO 27001, 27701, 42001, and 27017, as well as assisting with other aspects of information security, privacy, and information governance. We are looking for strong consultants to add to our team, particularly those with experience in IT audit, information security, data privacy, management systems, information governance, risk and compliance.

Key Responsibilities

• Work with client management on all aspects of client engagements, meetings and deliverables.
• Lead client calls, onsite meetings and presentations, and serve as the point of contact on engagements.
• Conduct risk assessment workshops and gap analysis interviews, producing reports with findings and remediation recommendations.
• Assess gaps in practices and controls against relevant standards and compliance frameworks, including ISO 27001, ISO 27701, ISO 27017, SOC 2, and ISO 42001.
• Support clients in implementing governance structures and controls for the standards relevant to the engagement.
• Create and review management system documentation and assist clients in developing policies, procedures, standards, and guidance.
• Prepare clients for certification audits by reviewing evidence supporting management systems and control effectiveness.
• Provide audit support, including onsite participation when needed.
• Prepare decks and meeting materials for client presentations and governance reviews.
• Develop and maintain project schedules, communicate responsibilities, and manage milestone expectations internally and with clients.
• Maintain awareness of current issues in information security, privacy, and AI governance, including evolving ISO standards and regulatory developments.
• Identify new business opportunities to expand and deepen current client engagements.

Education Requirements

• Bachelor's degree required.
• Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISSP, CIPP, or emerging ISO 42001 credentials.

Required Experience

• Five or more years of experience in information security, privacy, risk, compliance, or IT audit roles with progressive responsibility.
• Experience completing or managing consulting projects and deliverables with minimal oversight.
• Advanced understanding of information security tools, techniques, and control frameworks.
• Experience with standards and regulations such as ISO 27001 and related standards, ISO 27701, ISO 27017, GDPR, SOC 2, and NIST frameworks.
• Experience authoring, facilitating, and leading tabletop exercises with both technical teams and executive stakeholders, including scenario-based incident and breach response or AI event simulations.

Nice-to-Have Experience

• Experience with ISO/IEC 42001, AI risk and system impact assessments, and responsible AI governance is strongly preferred.

Required Skills

• Detailed understanding of important privacy and AI regulatory frameworks such as GDPR, CCPA/CPRA, and the EU AI Act.
• Strong writing skills, with the ability to communicate effectively with both executive leadership and technical staff.
• Strong analytical, problem-solving, and presentation skills in client-facing environments.
• Demonstrable success in project and/or program management.
• Strong leadership skills.
• Superior verbal and written communication skills, including drafting, reviewing and editing large, detailed technical documentation.
• Strong knowledge of the full Microsoft Office toolset.
• Experience leveraging GenAI tools to improve your work product and the services delivered to clients.
• Strong troubleshooting skills with the ability to exercise mature judgment.
• Superior attention to detail.
• Ability to adapt style and messaging to communicate effectively with professionals at all levels of the firm and its clients.
• Ability to multi-task successfully while working independently and within a group environment.
• Recognition as a thought leader with respect to positively influencing, negotiating and managing change.
• Superior analytical and diagnostic skills and ability to break down complex issues and implement appropriate resolutions.
• Ability to thrive in a demanding, deadline-driven environment with a focus on detail and accuracy.
• Executive presence in liaising with clients.
• Discretion in handling confidential information.
• Ability to build and maintain strong relationships with internal and client personnel.

About GTT

GTG is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number

26-01115