Position Summary
This role will work as part of a team assessing customer organizations against global, regulatory, and industry requirements as well as publications released by the International Organization for Standardization (ISO). The team member will initially support experienced project and team leaders and be assigned specific technical and non‑technical engagement segments. The role will develop into a practice Engagement Lead that collaborates with Project Managers, Directors, and other delivery team members to effectively manage project timelines, schedules, customer communication, and work product construction. A Senior Consultant on the Global Assurance team enhances the posture and maturity of customer processes affecting information security and data privacy management through the technical evaluation of governance programs. This role will evaluate both the design and operating effectiveness of technical controls supporting management systems and will help identify improvement opportunities for customers.
Key Responsibilities
* Autonomously leads interview and inquiry walkthroughs with client points of contact to determine the conformity of environments against stated requirements.
* Responsible party and primary, first‑level reviewer of draft audit planning and reporting material provided by support staff throughout the engagement lifecycle.
* Responsible party and final‑level reviewer of customer‑facing work products prior to release.
* Works closely with experienced team members to ensure the completeness and accuracy of audit procedures for customer organization scopes.
* Pursues and corroborates conclusions derived from inquiry procedures with auditee contacts while ensuring diligent interview notes are captured.
* Offline and remote evidence inspection of client‑provided documentation and appropriately marks artifacts requiring follow‑up.
* Drafts audit programs that address required objectives of the certification body and the complexity of the client environment.
* Adheres to pre‑defined project timelines and communicates possible changes to the schedule or scope of work.
* Manages priorities and tasks to achieve billable utilization targets.
* Engages in continuous professional development to maintain certifications, credentials, and designations.
* Collaborates with project managers, quality assurance, and other delivery team members to drive customer satisfaction and production of deliverables.
* Trains newer resources (both FTEs & contractors) on internal procedures and methodology.
* Identifies upsell and cross‑sell opportunities and escalates to practice management.
* Applies quality standards and adheres to a minimum benchmark for quality assurance throughout documentation.
* Maintains positive relationships with clients and stakeholders.
* Provides advice to customers on issues affecting the scope of work, adding value beyond audit criteria.
* Stays abreast of regulations or standards in draft or imminent enforcement affecting ISO publications.
* Works in a standard office environment, capable of remote work if necessary.
* Prefers availability during Eastern Standard Time (EST) working hours.
* Requires a passport.
Essential Skills
* Public‑speaking skills with an executive presence that commands attention.
* Inquisitive and curious nature, probing for deeper information.
* Attention to detail and quality processes.
* Strong consulting skills, corroborating surface discoveries with objective evidence.
* Ability to build high‑trust relationships, rapport, and credibility quickly.
* Strong written and verbal English communication skills, including explaining technical concepts to non‑technical audiences.
* Initiative in organization, time management, and learning.
* Proficient time management when handling multiple tasks.
Essential Experience
* 3–4 years of experience in a privacy‑related role such as Privacy Engineer, Technical Privacy Investigator, Privacy Analyst/Specialist, or similar; OR
* 3–4 years of experience as an IT consultant, IT auditor, or similar with knowledge of GDPR, ISO 27701, or sector‑specific privacy and data security laws at the federal level.
* Prior employment with a professional services firm or an accredited certification body for management systems.
* Previous project experience implementing or assessing information assurance frameworks and control sets (ISO 27001, ISO 27002, ISO 27017, ISO 27018, ISO 27701, CCM, NIST SP 800‑53, or NIST CSF).
* General knowledge and application of audit planning, testing, and reporting procedures.
* Capability to research a technical topic independently and develop logical testing approaches.
* Comfort leading customer calls, interview walkthroughs, and inquiry sessions with client points of contact.
* Knowledge of current events affecting information security and data privacy practices (e.g., breaches, laws, consent orders, and decrees).
* Computer and typing skills permitting rapid data collection during meetings.
Required Certifications
* Priority: Certification to ISO 27701 Lead Auditor/Lead Implementor, ISO 27001 Lead Auditor/Lead Implementor, ISO 9001 Lead Auditor, ISO 22301 Lead Auditor, ISO 20000‑1 Lead Auditor, CISA, CIPP/US, CIPM, or CIPP/E.
* Lower priority: CCSK, CRISC, CISM, CISSP, CCSP; Amazon Web Services Solutions Architect – Associate; AWS SysOps Administrator; Microsoft Azure Solutions Architect – Associate; Microsoft Azure Security Engineer – Associate; Google Cloud Platform Associate Cloud Engineer; GCP Professional Cloud Architect; etc.
Education
* Bachelor’s degree in a relevant field (CIS, MIS, Privacy, Law, Risk Management, or another related field).
#J-18808-Ljbffr