Director, GRC Global Advisory

About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary
The Director manages a team of consultants and/or senior managers, manages client escalations, provides business strategy to our clients, and scopes engagements.  This role will have a strong understanding of framework requirements, oversee advisory consulting engagements, and review and provide feedback on reports for clients.  They will work closely with Project Managers, Senior Managers, Managing Principals and other Delivery team members to effectively manage project timelines and deliverables.  They’ll work directly with the Senior Manager, Senior Director and/or Managing Principal to implement strategic plans to grow the service line and enhance the overall team’s capabilities and skillsets.  They will also have a strong acumen of the practice driving to achieve or exceed their revenue target.

What You'll Do

• Manage a team of 5-6 team members including both individual contributors and managers.
• Mentor all project team members on GRC advisory consulting methodologies based on industry recognized frameworks (HITRUST, ISO 27001, ISO 22301, ISO 27701, ISO 42001, SOC2, FedRAMP, HIPAA, NIST SP 800-53A Revision 5, etc.)
• Monitor the progress of the project and adjust as necessary to ensure successful completion of the project.
• Responsible for the managed revenue and team utilization.
• Oversee project status meetings to include information for: schedules, data requirements, assignments.
• Manage escalations of client engagements, ensuring delivery of quality products and services.
• Maintain quality service by establishing and enforcing organization standards. 
• Collaborates closely with sales team to drive strategic growth in Compliance Advisory organization.
• Manage team, responsible for talent decisions regarding performance management, compensation and hiring. Provide mentorship and coaching to team members in areas of audit, assessment, technical review, and writing.
• Continuous professional development in maintaining industry specific certifications and maintains strong depth of knowledge in the practice area.
• Closely follow industry development and trends to develop and maintain industry-specific policies, procedures, and training.
• Demonstrate expertise in the control requirements and test procedures of HITRUST, ISO 27001, ISO 22301, ISO 27701, ISO 42001, SOC2, FedRAMP, HIPAA, NIST SP 800-53A Revision 5, or other security compliance frameworks.
• Manage projects and team to achieve gross profit and revenue targets.
• Provides scoping and pre-sales support during sales process.
• Identifies practice sell-through opportunities and partners with other teams within Coalfire to ensure successful partnership with our clients.
• Work with HR and other leaders to create programs to enhance employee satisfaction and increase retention
• Establish strong relationships with named account base to grow accounts through account planning.
• Perform interviews of potential new hires for an intern, associate, consultant, senior consultant, senior manager and director roles.
• Ensure proper billing for all clients that the Director is involved.
• Develop thought leadership content on behalf of the practice and work with sales and marketing.

What You'll Bring

• Minimum of 8 years or more of working experience in information technology, information security, technical assessment, or audits
• At least two or more of the following Advanced certifications or equivalent in cybersecurity or cloud: CISSP, CISA, PMP, QSA, HITRUST Certification, CISM, CRISC, and/or AWS Associate or specialty cert in security 
• Bachelor's degree (four-year college or university) or equivalent education and experience with a degree in CIS, MIS, IT, or related field preferred
• Substantial knowledge and expertise of security control requirements (HITRUST, ISO 27001, ISO 22301, ISO 27701, ISO 42001, SOC2, FedRAMP, HIPAA, NIST SP 800-53A Revision 5, etc.) and how they overlap with additional frameworks
• Significant experience in understanding and applying relevant technical knowledge in FISMA/FedRAMP,