Information Security Compliance Consultant Remote

Information Security Compliance Consultant

Sunshine Enterprise USA is retained by our valued client to search and recruit for the following executive opening:

Information Security Compliance Consultant

Location:

100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities. Interview Process: 1-2 Rounds of Virtual Interviews. In person availability for interviews preferred. Duration: 12 Months

Employment Type:

Contract Experience

Required:

12+ Years Candidate location:
No South Carolina residency required. Open to nationwide candidates. All travel-related costs for onsite work will be the responsibility of the resource no matter the frequency of onsite work. Certification Requirement: CJIS Certification required after onboarding and processed by the client.

Project Scope:
Seeking an experienced Information Security Compliance Consultant to support statewide information security program initiatives. The consultant will assist agencies with tactical implementation of information security requirements, development and tracking of security implementation plans, compliance assessments, policy and procedure documentation, and governance activities. The consultant will work closely with business leaders, technical teams, and third-party stakeholders to evaluate security controls, assess compliance readiness, and ensure alignment with established security frameworks and state standards.

This role requires strong expertise in information security governance, risk, compliance (GRC), auditing, and regulatory frameworks.

Key Responsibilities:

• Support agencies with information security program implementation and compliance initiatives.
• Conduct interviews with business owners, technical teams, administrators, and third-party stakeholders to gather security and compliance requirements.
• Develop, document, and maintain security policies, procedures, and governance artifacts.
• Track and monitor Information Security implementation plans and remediation activities.
• Perform compliance assessments against established security frameworks and control standards.
• Review agency documentation and provide recommendations to strengthen security posture and compliance readiness.
• Analyze existing business processes and identify opportunities for improvement and risk reduction.
• Assist in developing corrective action plans (CAP) and Plans of Action & Milestones (POA&M).
• Support multiple concurrent security and compliance initiatives while maintaining project timelines.
• Prepare reports, findings, and compliance status updates for leadership and stakeholders.
• Ensure alignment with state security standards, regulatory requirements, and industry best practices.

Required

Skills & Experience:

• 10+ years of Information Security and Compliance experience.
• 2+ years of experience conducting security audits or serving as an Information System Security Officer (ISSO).
• Strong working knowledge of NIST 800-53 security controls and compliance requirements.
• Experience developing and managing POA&M and Corrective Action Plans (CAP).
• 3+ years of experience working with Governance, Risk, and Compliance (GRC) platforms such as Archer or similar tools.
• Strong documentation, communication, and stakeholder management skills.
• Experience assessing security controls and compliance programs.

Preferred

Skills:

• Experience developing Information Security Plans (ISPs) and System Security Plan (SSP) documentation.
• Experience managing multiple concurrent information security initiatives.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and PCI-DSS compliance frameworks.
• Government or public sector experience.
• Experience with process analysis, business process re-engineering, and compliance program development.
• Strong project scheduling and resource planning capabilities.

Education Bachelor's Degree Preferred

Certifications:

CISA, GSLC Equivalent Information Security Certification

SUNSHINE ENTERPRISE USA LLC is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.