Senior GRC Consultant

Position Title

Senior GRC Consultant

Department: Governance, Risk, and Compliance (GRC)

Reports To: GRC Manager

Employment Type: Full-Time Exempt

Work Location: Onsite in Huntsville, AL

Travel Requirements: Occasional travel for client engagements (generally less than 10%)

MAD Security is seeking an experienced Senior GRC Consultant to join our Governance, Risk, and Compliance (GRC) team. This role is ideal for a cybersecurity professional who enjoys solving complex compliance challenges, advising executive leadership, and helping organizations build practical, effective cybersecurity programs.

As a Senior GRC Consultant, you will lead cybersecurity compliance consulting engagements for organizations across the Defense Industrial Base and other regulated industries. You'll serve as a trusted advisor to executives and technical teams, helping clients navigate CMMC, NIST SP 800-171, DFARS, and other cybersecurity compliance requirements while developing practical, risk-informed security programs that support their business objectives. In addition to managing your own client portfolio, you'll mentor other GRC professionals, contribute to the continuous improvement of our consulting methodologies, and help maintain the high standards that define MAD Security.

• Lead cybersecurity compliance consulting engagements for assigned clients from planning through delivery.
• Serve as the primary advisor for executive and technical client stakeholders regarding cybersecurity risk, compliance, and implementation strategies.
• Conduct compliance assessments, gap assessments, risk assessments, tabletop exercises, mock assessments, and related consulting engagements.
• Review security architectures, technical implementations, policies, procedures, and evidence to determine compliance with applicable cybersecurity requirements.
• Develop practical remediation plans and implementation guidance that help clients achieve and maintain compliance.
• Prepare and review professional reports, executive presentations, and other client deliverables.
• Mentor GRC Analysts and GRC Consultants while contributing to the continuous improvement of MAD Security's consulting methodologies and delivery standards.

• Successfully manages an assigned portfolio of consulting clients while maintaining exceptional client satisfaction.
• Leads complex compliance engagements with minimal oversight while consistently delivering high-quality work.
• Establishes trusted advisor relationships with executive and technical stakeholders.
• Produces professional reports and deliverables that require minimal revision.
• Provides technical guidance and mentorship that improves the performance and consistency of the GRC team.
• Contributes meaningful improvements to MAD Security's consulting methodologies, documentation, or service offerings.

• Minimum of seven years of experience in an information technology-related position, with three or more years of cybersecurity experience preferred.
• Previous experience leading cybersecurity compliance consulting or assessment engagements.
• Experience managing multiple concurrent client engagements, projects, or priorities.
• Experience leading executive-level client meetings and presenting technical or compliance information to senior leadership.
• Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or a related field preferred. Equivalent professional experience may be considered in lieu of a degree.

• Strong understanding of enterprise IT infrastructure, cybersecurity technologies, and security architecture.
• Experience interpreting and applying…