Information Security Compliance Consultant

Information Security Consultant

Applicant must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future;
We will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Responsible for the execution of our security strategy and helps foster a strong culture of security across the organization. This role will focus on driving awareness, supporting security initiatives and working closely with teams to ensure security is part of how we operate every day. It is a strategic, advisory, hands‑on role and one that enables people, strengthens processes and makes security practical and accessible.

• Assists in implementing the organization’s information security strategy and initiatives.
• Supports the integration of new businesses following acquisitions by aligning them with corporate security policies, processes and tools. In addition, will support divestiture activities when needed.
• Assists in risk assessments, highlighting areas for improvement and supporting remediation efforts.
• Develops clear and engaging communications that promote security awareness across all levels of the organization.
• Conducts research and shares insights on industry trends, emerging threats, best practices and regulatory changes to support decision making.
• Provides guidance to team members on security policies, standards and procedures in a supportive and collaborative way.
• Supports the rollout of security awareness and education programs that engage team members and reinforce security behaviors.
• Tracks and reports the effectiveness of awareness campaigns and culture-building activities.
• Identifies the top human risks to our organization and the behaviors we need to change to mitigate those risks. Develops and maintains security awareness program metrics that will effectively change these behaviors and reduce risk to our organization.
• Develops and presents clear, actionable communications and reports for leadership and non-technical audiences.

• Bachelor’s degree in Information Security, IT, Business or related field (or equivalent experience).
• 7-10 years of experience in information security, risk management, security program management or IT related field.
• Professional certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) (preferred but not required)
• Experience leading or supporting security awareness and education programs, risk management or compliance initiatives.
• Familiarity with security frameworks (e.g. NIST CSF, ISO 27001)
• Exceptional written and verbal communication skills with the ability to engage and guide senior stakeholders.
• Strong project management and problem-solving skills with a focus on driving measurable outcomes.
• Collaborative and adaptable with experience engaging stakeholders at different levels.