Audit Frameworks, Communication, Communications Management, Compliance, Compliance & Regulatory Frameworks, Cross-Cultural Communication, GAP Analysis, ISMS Audit, ISO27001/27002, NIST 800-53, Policy Management, Processes, Regulatory Compliance, Security & Risk Assessment, Security Audits, SOC 2 Type I/II, Stakeholder Interviews, Stakeholder management

The Senior Security Consultant leads General Compliance Advisory engagements that may include NIST 800-53, SOC2 and ISO 27001 frameworks. Engagements which may include identifying compliance gaps, advising, developing compliance documentation, and/or evaluating the security and compliance of client systems and services to meet requirements. This role will have a strong understanding of NIST 800-53, SOC2 and/or ISO 27001 framework requirements. They will collaborate with Project Managers, Directors and other Delivery team members to effectively execute project timelines and associated deliverables.

Requirements

SKILLS

- Strong written and verbal communication skills
- Strong personal initiative to appropriately manage time and meet deadlines
- Strong Consulting skills; ability to advise and challenge the status quo while building strong relationships
- Ability to build high-trust relationship and credibility quickly
- High attention to detail
- Ability to facilitate meetings to small or large groups
- Diplomatic and broad minded
- Ability to deliver feedback to junior team members
- Ability to clearly communicate tasks to team members

EXPERIENCE

- 5+ years of experience as a consultant within professional IT services
- Working knowledge of virtualization or cloud technologies




- Working knowledge of client-server and traditional on-premises architecture
- Knowledge of information security related solutions, tools, and utilities
- 4+ years of experience working on audits, readiness assessments, risk assessments, and/or policy review within one or more of the following frameworks:
- ISO/IEC 27701:2022
- System and Organization Controls (SOC) 2
- NIST 800-53 (FedRAMP, FISMA, DoD Cloud SRG, etc.)
- NIST 800-171 (CMMC)

REQUIRED CERTIFICATIONS/SKILLS

- Dependent on the framework(s) you will be supporting you must have one or more of the following
- ISO/IEC 27001 Lead Auditor
- ISO/IEC 27001 Lead Implementor
- CISA
- CISM
- CISSP
- CMMC CCP or CCA

PREFERRED CERTIFICATIONS/SKILLS (not required)

- Security+
- Certificate of Cloud Security Knowledge (CCSK)
- AWS/GCP/Azure specific certifications

EDUCATION

- Bachelor’s degree in (four-year college or university) in IT or business, or equivalent combination of education and work experience

Job responsibilities

ESSENTIAL RESPONSIBILITIES

- Lead advisory projects including workshops, gap analyses, system security plan development, policies and procedures development, risk assessments, and other consulting services as required.




- Provide IT system security consultation within cloud-based and on-premises environments in accordance with NIST 800-53, SOC 2, and/or ISO 27001.
- Draft gap analysis reports and internal audit reports pertaining to NIST 800-53, SOC 2, and/or ISO 27001.
- Develop and/or review applicable framework required documentation (i.e. Systems Security Plan (SSP), ISO 27001 Statement of Applicability, and/or SOC2 System Description)
- Develop and/or review NIST 800-53, SOC 2, and/or ISO 27001 related policy and procedure documentation and prepare customers for associated assessments.
- Facilitate NIST 800-53, SOC 2, and/or ISO 27001 risk assessment engagements
- Identify and communicate NIST 800-53, SOC 2, and/or ISO 27001 gaps along with remediation recommendations.
- Oversee the collection and interpretation of information provided by clients, map to appropriate requirements and collaborate with project leads to determine overall level of compliance.
- Manage priorities and tasks to achieve delivery utilization targets.
- Ensure quality products and services are delivered on time.
- Ensure continuous professional development by maintaining industry specific certifications.
- Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables.
- Establish and maintain positive collaborative relationships with clients and stakeholders

WORK ENVIRONMENT/TRAVEL REQUIRED

- Travel up to 25%
- Hybrid 3 days in the office

What we offer

Exciting Projects: Come take your place at the forefront of digital transformation With clients across all industries and sectors, we offer an opportunity to

📌 SR Advisory Consultant2 (Buenos Aires)
🏢 Globallogic
📍 Buenos Aires