Senior Information Security Consultant

Description

The Senior Information Security Consultant is responsible for providing cybersecurity and risk assessment services, subject matter expert support and solutions for Heartland Business Systems’ (HBS) customers. Deliverable areas could include, but are not limited to, Risk & Security Assessments, Remediation and Mitigation Recommendations, Strategic Roadmaps, Privacy and Security Policy, Procedure and Program development, Awareness and Education, and SME support. Senior Information Security Consultants at HBS provide strategic guidance to our clients and serve as the virtual Chief Information Security Officer for multiple organizations.

This position is also responsible for collaborating with sales and marketing to ensure proposed deals include technical solutions that accurately address client needs.

• Work as a member of the cybersecurity team providing consultative and proactive risk & security related support to HBS’ account base.
• Assist clients with identifying gaps within existing risk & security programs and designing solutions to address those challenges.
• Support clients with the identification, development, and implementation of technological and organizational controls to support risk and security programs.
• Deliver leadership services in support of security remediation or mitigation.
• Responsible for overall project management of many large projects and may work directly with other engineering resources in addition to the client.
• Lead work in all phases of the engagement, including project planning, developing project plans, leading teams in completing tasks, client status reporting, and presenting project results to the client.
• During the entire sales process, provide sales consultants and other HBS staff with assistance, review, validation, and optimization of privacy and security solutions.
• Maintain a high level of knowledge related to privacy and security regulations (i.e. HIPAA, CMMC, PCI, GDPR, etc.) and standards best practices (NIST 800, ISO 2700X, CIS, etc.), OCR enforcement trends, HHS/OCR guidelines, and state‑specific consumer‑protection rules.
• Prepare articles, whitepapers, blogs and speak at industry conferences to create awareness of our brand/services as it relates to privacy, security, and risk management.
• Conduct a variety of risk assessments and provide guidance on improving processes, creating policies & procedures, and working with other HBS teams when necessary, on solution sets.
• Present educational and information sessions with clients and other staff, as appropriate.
• Develop information security programs and provide strategic guidance to clients while serving as vCISO.
• Build and further develop client relationships.
• Work in a team atmosphere as both a leader and contributor as assigned. At all times maintaining a professional and respectful demeanor.
• Provide input on the improvement of customer facing documentation such as proposals, statements of work, status reports, reports, marketing materials, etc.
• Provide input on the improvement of risk and cybersecurity products and services offered to clients.
• Work to attain and maintain relevant cybersecurity and risk certifications.
• Minimum of 1350 hours, or equivalent vCISO work, billed per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on the job training.

• 5+ years of related experience
• 5+ years implementing Cybersecurity Programs
• 3+ years implementing Compliance and Governance Programs
• CISSP or other current industry standard certifications in areas of security expertise
• Significant experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
• Proven experience recommending and delivering cybersecurity, compliance, and risk management services
• Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
• Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security…