Specialist GRC Consultant (USA)

Dionach are a dynamic cyber security company looking for an experienced GRC Consultant to join our growing Cyber Security Team, mainly working on specific long-term projects.

Do you have extensive experience in ISO 27001, auditing Information Security Management Systems, and Risk Management?

Do you want to continue improving your management system skills while gaining more responsibilities? If so, keep reading, this job is for you!

Your main role will be as a GRC Consultant in our Cyber Security Team and to work in other areas of information security consultancy. You will be primarily working on long-term GRC projects for a specific client, which includes risk management, developing ISO 27001 control assessments, developing ad-hoc compliance assessments, reporting on assessments, internal ISMS audits, and working with client stakeholders. You will be working closely with the Dionach Project Manager for this client.

Outside of this project there is plenty of scope to work on a variety of other GRC projects and develop skills; you will have the opportunity to work on information security assessments as part of large projects, ISO 27001 audits, ISO 27001 consultancy, and develop areas such as privacy and business continuity. See Dionach Services on our webpage for a full list of our services.

There are opportunities to improve your qualifications, mentor others and work with a wide variety of management systems, technologies, and organisations.

Requirements

Essential Qualifications and Experience

• ISO 27001 Lead Auditor qualification.
• Significant experience in implementing, managing, and auditing ISO 27001 based Information Security Management Systems.
• Significant experience in risk management and risk assessment.
• Significant previous IT experience.
• Experience of working as the lead consultant and of working in teams.
• Outstanding verbal communication skills.
• Excellent report writing skills with ability to explain information security risks to non-technical senior stakeholders.
• Based in the USA.

Desirable Qualifications and Experience

• Information security qualifications such as CISM, CISA or CISSP.
• ISO 27001 Lead Implementer qualification.
• Experience of PCI DSS.
• Experience of SWIFT CSCF.
• Experience of ISO 22301 BCMS or ISO 27701 PIMS.
• Mentoring peers.
• Developing and providing training.
• Proactive at writing technical documents and improving processes.

Benefits

• Skills development.
• Certifications and qualifications.
• USA based employees have a range of employee benefits.

Why choose Dionach?

Dionach are a growing information security company specialising in penetration testing, GRC consultancy and information assurance services. You will have the opportunity to join an experienced team and enhance your skills. Dionach have leading industry certifications including CREST, Cyber Scheme, CHECK, PCI QSA, SWIFT CSCF, ISO 27001, and ISO 9001, with a focus on improving customers’ security, and developing people’s skills and qualifications.

Dionach are always looking for self-motivated people who wish to work in a fun, flexible environment, where they can make a difference to the business. We are a growing business which provide opportunities for both interesting work and career development.

Dionach are proud to be an equal opportunities employer with a commitment to creating an environment which values equality, encourages diversity, and contributes to an inclusive organisational culture.

We strive to create the best working environment possible for each of our employees, whether working from home or from one of our offices. We offer encouragement and support so our employees can develop to their full potential and utilise their unique talents.

We welcome applications from anywhere in the USA.

Job type: full-time, permanent

Location: remote

Gross salary: up to $90k per annum, depending on experience and qualifications.