GRC Senior Consuntant; vCISO; Remote

About Us:

At Echelon Risk + Cyber, we believe in defending basic human rights to security and privacy. We are looking for an exceptional Senior Consultant for our growing vCISO Practice. This individual will lead and deliver client engagements, quality-review the work of the broader team, and help build the processes that support Echelon's continued growth. Consultative client work spans a wide range of industries, sizes, and compositions.

Our next team member will be ready to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned integrity. This person is passionate about cybersecurity, works as an Entrepreneurial Problem Solver, and builds creative solutions alongside Echelon teammates.

At Echelon the learning never stops. You will engage with systems at the cutting edge of technology and work with team members who challenge you with meaningful work. We let people build from the ground up and make an impact across the organization.

As a Senior Consultant, you are a trusted, reliable resource for clients and a technical and delivery leader inside Echelon. You will own significant portions of client initiatives and key deliverables, lead workshops, quality-review team output before it reaches the client, and coach junior consultants. You will address broader strategic challenges for clients, proactively identify and address project risks, and represent Echelon with confidence in senior-level discussions.

• Own and manage defined portions of client initiatives, including scope, timeline, dependencies, status reporting, and delivery of key deliverables.
• Conduct client discoveries and onboarding of services, including client interviews, discovery and assessment plans, evidence requests, and review of documentation and supporting evidence.
• Plan, coordinate, and manage cybersecurity and compliance programs using strong project management and communication techniques (e.g., build security roadmaps, prioritize and track initiatives).
• Proactively identify and address project risks, scope changes, and client dependencies before they affect delivery.

• Plan and lead client workshops, such as risk assessments, framework assessments and policy walkthroughs.
• Communicate complex security and compliance topics clearly to senior client stakeholders, adjusting message and depth to the audience.
• Work with clients to identify information security risks and challenges and provide actionable, right-sized recommendations.
• Represent Echelon in high-level client discussions.

• Review and assess security and technology controls against cybersecurity best practices and compliance frameworks.
• Develop and maintain cybersecurity policies and procedures.
• Perform quality assurance review of team deliverables, including reports, assessments, policies, roadmaps, and presentations, for accuracy, completeness, consistency, and adherence to Echelon standards before client delivery.
• Document results, create client reports, and communicate findings to client management and other stakeholders.
• Create client-facing presentations and executive-level reporting.

• Take ownership of proposals, statements of work, budgets, and work plans, and contribute strategic insights to business development efforts.
• Identify new growth opportunities within client accounts and partner with leadership to act on them.
• Work with the internal team to develop engagement strategies, define objectives, and recommend approaches to address client risks.
• Help build and improve Echelon's internal processes, templates, and methodologies.

• Provide guidance, coaching, and feedback to junior team members, and contribute to team capability through training.
• Model Echelon values, including "Turning Pro" and "Client Centricity," by mentoring others on technical excellence, ownership, and follow-through.
• Manage multiple simultaneous client engagements and priorities while delivering quality results on time.

• Create and execute a formal plan for personal growth marketing, including regularly publishing thought leadership for Echelon's website blog.
• Engage in the cybersecurity community by attending or speaking at local or national conferences.

• 5+ years of related…