[Remote] Security GRC - Cybersecurity Risk Advisor

Note: The job is a remote job and is open to candidates in USA. ECI is a global provider of managed services, cybersecurity, and business transformation for mid-market financial services organizations. The Cybersecurity Risk Advisor will strengthen clients’ cybersecurity posture by developing risk management strategies, advising on regulatory compliance, conducting assessments, and aligning security initiatives with business objectives across multiple regions.

Responsibilities

• Create a relationship with clients as a trusted cybersecurity advisor
• Develop and implement cybersecurity risk management strategies tailored to the needs of financial services and government clients in various regions
• Advise clients on compliance with regulatory frameworks and global standards like ISO 27001, NIST, and CIS
• Conduct security assessments and gap analyses to identify weaknesses and recommend actionable improvements
• Collaborate with client stakeholders, including CISOs and IT leadership, to align cybersecurity initiatives with business objectives
• Stay current with evolving cyber threats, regulatory updates, and industry trends across various regions
• Support clients during internal and external audits, including preparation of documentation and remediation planning
• Collaborate with team members and contribute to the continuous improvement of internal methodologies and knowledge sharing
• Respond to ad hoc client queries related to cybersecurity, risk, and compliance
• Travel within the US region up to 15% as required
• Other duties as assigned

Skills

• Approximately 8 years of experience in cybersecurity, risk management, or IT governance, particularly within the financial services and government sector
• Excellent communication and presentation skills, with the ability to engage senior stakeholders and varied audiences and explain complex topics in business terms
• Strong understanding of international regulatory frameworks
• Familiarity with global standards such as ISO 27001, NIST CSF, CIS Controls, and COBIT
• Proven experience conducting security assessments, audits, and risk analyses
• Self-motivated, adaptable, and capable of working independently on tasks and projects
• Bachelor's degree in a relevant field such as Computer Science, Information Technology, Cybersecurity or equivalent combination of education and professional experience, typically 4+ years in information security, IT operations, or a related technical role
• Experience in cybersecurity, IT risk, or compliance, preferably within the financial services sector
• Industry certifications such as CISSP, CISM, CRISC, or CCSP
• Previous MSP/MSSP experience
• Technical knowledge of IT systems and security controls (e.g., Microsoft, Cisco, endpoint protection, IAM, etc.)
• Strong familiarity with and understanding of O365 admin center

Benefits

• Variable bonus of up to $12,000
• Flexible PTO
• Health benefit eligibility the first of the month
• Life insurance
• Pet insurance
• 401K
• Ability to work in a remote environment with moderate supervision

Company Overview

• The global market leader in outsourced IT technology and services for the financial industry. It was founded in 1995, and is headquartered in Boston, Massachusetts, USA, with a workforce of 501-1000 employees. Its website is http://www.eci.com.

Company H1B Sponsorship

• ECI has a track record of offering H1B sponsorships, with 1 in 2022, 1 in 2021, 3 in 2020. Please note that this does not guarantee sponsorship for this specific role.