Audit and Cyber Security Senior Consultant

Elevate Agency - Coral Gables, FL

Full-time - Mid Level

Onsite - Coral Gables, FL

Professional, Scientific, and Technical Services

About the position

The Audit and Cyber Security Senior Consultant at Elevate is responsible for conducting information security assessments, IT audits, and advisory projects. This role requires strong communication and analytical skills, as well as a commitment to learning about AI risk management and governance. The consultant will enhance clients' cybersecurity resilience and compliance while mentoring junior consultants and contributing to the development of the cybersecurity practice.

Responsibilities

• Demonstrate professional client management skills by building and maintaining strong relationships with clients.
• Communicate findings, recommendations, think creatively and drive project progress effectively.
• Conduct comprehensive cybersecurity audits and risk assessments by evaluating information security policies, procedures, and controls.
• Utilize industry and security knowledge to help clients identify vulnerabilities, weaknesses, gaps in controls and potential threats in order to translate into language understandable to the client and actionable for remediation.
• Participate in strategic cybersecurity planning by collaborating with clients to refine cybersecurity strategies and implement governance and compliance frameworks.
• Assist clients in establishing cybersecurity roadmaps and long-term security goals.
• Experience working with internal audit, risk and IT departments and performing readiness assessments or audits of business and IT functions.
• Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions.
• Conduct specialized IT frameworks audits and assessments (e.g. ISO 27001, HITRUST, HIPAA, NIST etc.).
• Build and nurture positive working relationships with clients and coworkers, by providing high quality deliverables and communications.
• Appropriate reporting of action items, roadblocks, and other tasks during projects to managers and clients.
• Play a substantive role with project management by supporting engagement planning, providing regular status reports for the client, while collaborating with junior staff.
• Exercise professional skepticism, judgment and adhere to the code of ethics while on engagements.
• Other tasks and duties as assigned.

Requirements

• Bachelor's degree in Management Information Systems, Information Technology, Computer Science, Accounting, or Business Administration.
• 4-5+ years of relevant work experience, with industry focus a plus.
• Prior consulting experience in cybersecurity, risk management, IT audit, and/or other applicable fields, with a minimum of 3 years in consulting with multiple clients.
• Demonstrated experience in one or more areas of cybersecurity such as network security, identity and access management, threat intelligence, cloud security, GRC.
• Demonstrated ability to manage multiple projects simultaneously and experience scoping, planning, and executing projects autonomously.
• Strong experience with regulatory and compliance standards (e.g., NIST, ISO 27001/2/17/18/ 27701, SOC 1, SOC 2, SOX, HITRUST, HIPAA, PCI etc.).
• Must be legally authorized to work in the United States without the need for employer sponsorship.

Nice-to-haves

• Big 4 consulting experience in various industries.
• Ability to state complex issues simply.
• Strong communication skills, both written and verbal.
• Experience with working in an ambiguous environment.
• Certification as CISSP, CCSK, CISA, CISM, and/or CPA preferred.