Senior Security Consultant (GRC)

Location: US - TX - Home Office; remote position with a home office setup determined by SHI management. Travel to SHI, partner, and customer events may be required up to 10%.

Annual pay range: $165,000–$205,000, including base salary and bonus.

Company

hirify.global provides IT solutions and services to organizations worldwide through a global technology services organization.

What you will do

• Lead independent, client-facing GRC and cybersecurity consulting engagements.
• Advise clients on governance, risk management, compliance, and security program maturity.
• Conduct security, risk, compliance, and control-effectiveness assessments against industry frameworks and regulations.
• Facilitate enterprise, cyber, third-party, and incident-response risk assessments and tabletop exercises for technical and executive stakeholders.
• Develop governance models, security frameworks, data governance blueprints, policies, standards, and operating procedures.
• Support audit readiness, compliance reporting, evidence validation, remediation planning, practice development, and consultant mentoring.

Requirements

• Must be based in the United States with a home office setup.
• 7+ years of experience in governance, risk, and compliance.
• Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or equivalent practical experience.
• Expertise in governance models, security frameworks, policies, standards, operating procedures, cloud security governance, and compliance standards.
• Practical GRC advisory experience covering security governance, risk assessments, compliance assessments, control evaluations, and cybersecurity program maturity reviews.
• Working knowledge of NIST, ISO 27001, CIS, SOC 2, PCI DSS, and HIPAA, plus familiarity with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, LogicGate, or OneTrust.

Nice to have

• Experience in cybersecurity advisory or internal audit within a client-facing professional services environment.
• Experience at a cybersecurity services provider, consulting firm, advisory practice, or professional services organization.
• Certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Lead Auditor.

Culture & Benefits

• Remote work with a company-provided home office setup determined by management.
• Opportunities for continuous professional growth and leadership development.
• Medical, vision, dental, 401(k), and flexible spending benefits may be available.
• Work across sales, account executives, project managers, technical teams, and practice leaders.