Senior Risk Advisory GRC Consultant – Full Time- Remote in the USA

June 8, 2026

<p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: justify;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text;" data-ccp-charstyle="normaltextrun" data-ccp-charstyle-defn="{" objectid":"ac0262f4-8a9e-5820-b908-2d943c5f7113|1","classid":1073872969,"properties":[201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777841,"calibri",469777842,"",469777843,"calibri",469777844,"calibri",201341986,"1",469769226,"calibri",268442635,"22",469775450,"normaltextrun",201340122,"1",134233614,"true",469778129,"normaltextrun",335572020,"1",469778324,"default="" paragraph="" font"]}"="">About us: <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text;" data-ccp-parastyle="paragraph" data-ccp-parastyle-defn="{" objectid":"aaed607e-c2a3-5841-9fb4-41037bfa0faf|1","classid":1073872969,"properties":[469777841,"times="" new="" roman",469777842,"times="" roman",469777843,"times="" roman",469777844,"times="" roman",469769226,"times="" roman",268442635,"24",335559740,"240",201341983,"0",335559739,"0",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",469775450,"paragraph",201340122,"2",134233614,"true",469778129,"paragraph",335572020,"1",134233118,"true",134233117,"true",469778324,"normal"]}"="">At Echelon Risk + Cyber, we believe in defending basic human rights <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; background-position: 0px 100%; background-repeat: repeat-x; border-bottom: 1px solid transparent;" data-ccp-charstyle="normaltextrun">to security and privacy. We seek a highly skilled and experienced Senior Risk Advisory GRC Consultant to join our dynamic team at Echelon Risk + Cyber, a leading cybersecurity consulting firm. Our next team member will be ready to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned integrity. This team member will be passionate about cybersecurity and ready to use their knowledge to be an Entrepreneurial Problem Solver and work alongside their Echelon team members to build creative solutions. <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: justify;">As a Senior Risk Advisory GRC Consultant, you will lead client engagements focused on information security, compliance, and risk management across frameworks such as SOC 2, ISO 27001, PCI DSS, HITRUST, HIPAA, and CMMC. In this role, you will serve as a trusted advisor to clients, helping them assess security risks, strengthen control environments, achieve compliance objectives, and improve overall cybersecurity maturity. You will manage multiple engagements, provide strategic guidance, mentor junior team members, and deliver high-quality consulting services while building strong client relationships and contributing to the growth of the practice. <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: justify;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">At Echelon, you will have the opportunity to engage with clients, business partners, and systems that are at the cutting edge of technology. We allow our employees to build from the ground up and make an impact across the organization. We look for driven and proactive people who are eager to contribute to a distinct and thriving Cybersecurity services organization that can adapt to a rapid and changing environment. <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: #ffffff; color: windowtext; text-align: justify;">This is a remote <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; background-position: 0px 100%; background-repeat: repeat-x; border-bottom: 1px solid transparent;">position from anywhere in the USA. <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 18px; font-variant-ligatures: none !important;" data-contrast="none">What You Will Do: <ul> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Lead and execute SOC 2 Type I/II readiness assessments and attestation engagements, including scoping, control evaluation, gap identification, remediation planning, and client advisory services</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Lead and develop ISO 27001 gap assessments, internal audits, and certification readiness engagements for clients across a range of industries and organizational sizes</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Lead the testing and evaluation of IT General Controls (ITGCs) across client environments, documenting <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; background-position: 0px 100%; background-repeat: repeat-x; border-bottom: 1px solid transparent;">findings and delivering actionable remediation recommendations</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Lead and develop PCI DSS, HITRUST, HIPAA, and CMMC Level 2 compliance assessments, providing strategic guidance and oversight throughout the engagement lifecycle</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Review and oversee audit workpapers, evidence requests, control narratives, and client-facing deliverables to ensure consistency, quality, and adherence to professional standards</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Partner directly with clients to identify and assess information security risks, develop security policies and procedures, and provide practical remediation strategies aligned with business objectives</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Lead and develop incident response planning initiatives, tabletop exercises, and business continuity engagements as part of Echelon's broader cybersecurity advisory portfolio</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Manage and oversee multiple concurrent client engagements, balancing priorities, mitigating risks, and delivering high-quality results on schedule</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Build and strengthen internal and client relationships through exceptional written and verbal communication, effectively translating technical findings for both technical and executive-level stakeholders</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Drive continuous improvement by staying current with evolving compliance frameworks, audit standards, and emerging security threats, enhancing both client services and internal methodologies</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Demonstrate thought leadership through the creation of cybersecurity content, participation in industry events, mentorship of junior consultants, and active involvement in the cybersecurity community</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Mentor and guide junior consultants and associates, providing technical oversight, quality reviews, and professional development support</li> </ul> <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 16px; font-variant-ligatures: none !important;" data-contrast="none">Your Knowledge, Skills, and Abilities: <ul> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">5–7 years of hands-on experience in IT audit, compliance, cybersecurity consulting, or GRC advisory services, with significant experience leading SOC 2 Type I/II audits, ISO 27001 assessments, and related attestation engagements</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Deep understanding of IT General Controls (ITGCs), Trust Services Criteria, and audit standards such as SSAE 18 and ISAE 3402, with practical experience leading incident response planning and business continuity initiatives</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Proven ability to lead risk assessments, compliance reviews, readiness evaluations, and remediation programs across frameworks, including SOC 2, ISO 27001, PCI DSS, HITRUST, HIPAA, and CMMC</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Strong analytical and problem-solving skills, with the ability to assess complex risk scenarios and provide strategic, business-aligned recommendations</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Experience leveraging leading GRC platforms and technologies to drive compliance, risk management, and governance initiatives</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Excellent communication, presentation, and stakeholder management skills, with the ability to engage technical teams, executive leadership, and client stakeholders</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Strong project and engagement management skills, including leading multiple client engagements simultaneously while maintaining quality, budget, and client satisfaction objectives</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Demonstrated experience mentoring junior team members and contributing to the development of internal methodologies, templates, and best practices</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Prior experience at a Big 4 firm, mid-tier CPA/advisory firm, cybersecurity consulting firm, or boutique IT audit/attestation practice is strongly preferred</li> <li>Applicants must have authorization to work in the United States without current or future visa sponsorship</li> </ul> <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 18px; font-variant-ligatures: none !important;" data-contrast="none">Preferred Qualifications:<span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 19px; font-variant-ligatures: none !important;" data-contrast="none">  <ul> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Certified in one or more of the following: CISA, CIA, CPA, CISSP, and/or ISO 27001 Lead Auditor</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Extensive experience leading the incident response lifecycle, including preparedness, response, recovery, and lessons learned activities</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Experience developing project plans, engagement roadmaps, staffing models, and delivery timelines</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Proven track record leading high-volume SOC 2 and ISO 27001 engagements in a client-facing consulting, advisory, or attestation environment</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Experience with government and <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; background-position: 0px 100%; background-repeat: repeat-x; border-bottom: 1px solid transparent;">regulated-industry compliance frameworks, including FedRAMP, CMMC, NIST 800-53, and related security standards</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; font-size: 10pt; line-height: 16px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Experience managing client relationships, expanding advisory opportunities, and contributing to business development initiatives</li> </ul> <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 18px; font-variant-ligatures: none !important;" data-contrast="none">Why <span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; background-position: 0px 100%; background-repeat: repeat-x; border-bottom: 1px solid transparent;" data-ccp-charstyle="normaltextrun">Echelon? <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality," and we want to allow you the space to bring your full self to work. <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; outline: transparent solid 1px; line-height: 18px; font-variant-ligatures: none !important;" data-contrast="none">We Currently Offer The Following Benefits: <ul> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Access to medical, dental, and vision insurance through Cigna, with the majority of the employee cost covered by the employer </li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Employer funding to HSA accounts and FSA access </li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Access to a 401(k) through Vanguard with a guaranteed employer contribution </li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Flexible vacation policy that allows you to manage your schedule and rest and recharge when you need to.</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">11 holidays with flexibility based on what is important for you and those you love</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Employer-paid short-term and long-term disability, employer-paid life insurance, and access to additional life insurance, hospital coverage, accidental coverage, discounted mental health support, and more</li> <li><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">Support for individual development through certifications, continued learning, conferences, and more</li> </ul> <p style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; overflow-wrap: break-word; vertical-align: baseline; font-kerning: none; background-color: transparent; color: windowtext; text-align: left;"><span style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; padding: 0px; user-select: text; font-size: 10pt; line-height: 18px; font-family: verdana, geneva, sans-serif; font-variant-ligatures: none !important; color: #000080;" data-contrast="auto">We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status, or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.

Back to blog

DISCLAIMER