A bachelor's degree is preferred, with concentrations in Information Systems, Cybersecurity, Business, or Finance.
At least 1-2 years of work experience in technology, security, or management consulting.
Relevant work experience in Compliance, Risk Management, Privacy, or Cybersecurity.
Experience with Governance, Risk, and Compliance tools such as OneTrust or LogicGate.
Ability to understand how data flows through an enterprise environment and evaluate and mitigate risk.
Ability to work independently, complete tasks within deadlines, and seek support when needed.
Ability to communicate work progress and potential timeline impacts clearly and proactively.
Willingness to interact with clients and develop skills in external presentations and communication.
Openness to feedback and a motivation to learn and grow.
Ability to solve problems independently and achieve results.
Responsibilities
Lead and execute information security and privacy projects, including risk assessments, vulnerability assessments, and compliance audits.
Develop and implement security and privacy strategies to protect against cyber threats and ensure compliance with relevant laws and regulations, including GDPR, CCPA, and HIPAA.
Stay up to date with security systems, tools, trends, and technology.
Contribute to team culture through strategy, recruiting, team building, and practice development.
Work alongside other consultants to execute project plans, with career and project support from a direct manager.
Desired Qualifications
An advanced degree in a relevant field, such as a JD or MBA.
Certification or relevant technical licenses, such as CIPP, CISSP, or CISA.
Background or experience working with global organizations.
Effectiveness in a fully remote working environment.
About AGRADA
At Agrada, we believe in simplifying privacy and cybersecurity management with solutions as unique as the businesses we serve. We were founded with one clear goal: to bridge the gap between the high-level expertise of large firms and the personalized care of a boutique consultancy. Unlike traditional one-size-fits-all solutions, we strive to truly understand our client’s businesses, their specific priorities and unique challenges to craft strategies that are both realistic and sustainable.
Our team is built on a foundation of global experience, industry knowledge, and an unwavering commitment to excellence. Drawing on backgrounds that include working with some of the most prominent organizations in the world, we bring a practical, hands-on approach to every client partnership.
The Role
As our company continues to grow, we are seeking a senior information security and privacy consultant. This role will work alongside multiple other consultants in executing project plans while receiving both career and project support from a direct manager. We are looking for individuals who are determined, detail-oriented and independent problem-solvers.
What you’ll do
Lead and execute information security and privacy projects, including risk assessments, vulnerability assessments, and compliance audits.
Develop and implement security and privacy strategies to protect against cyber threats and ensure compliance with relevant laws and regulations, including GDPR, CCPA, and HIPAARemain up to date with the latest security systems, tools, trends, and technology.
Play an integral part of our team to help create culture through strategy, recruiting, team building, and practice development
Role Competencies
Consistent & Timely Project Execution: As this will be a fully remote position, it is imperative you are a strong executor with an independent approach to completing your work within deadlines. You will be given goals and corresponding timelines, but you must determine how to complete the tasks in the timeframe you are designated and seek support when needed.
Service Line Specialist: We are looking for individuals who have a specialty or background related to information security (Cybersecurity, Privacy, or Digital Transformation). While you do not have to be well-versed in all categories, you must be able to understand how data flows through an enterprise environment and how to evaluate and mitigate risk.
Clear and Accurate Communication: Given our remote culture and focus on deadlines, we are looking for individuals who can communicate early and transparently about their work and progress; this is a detail-oriented, precise and organized individual. While we know challenges will arise, we are looking for someone who can voice how these obstacles will impact timelines and present that information in a clear and concise manner to the rest of the team. We are looking for proactive executors who can foresee an at-risk deadline and communicate this as early as possible to the team.
Client Engagement: We are looking for individuals who are willing to interact with clients and want to grow their skills in external presentations and communication.
Coachable: We are looking for driven and motivated individuals who want to learn and grow. In order to develop your skills, we are looking for people who are open to feedback and have a growth mindset.
Results Driven: We are looking for ambitious critical thinkers that are capable of independently solving problems and achieving results.
Role Qualifications
Education and Experience
Bachelor’s degree (preferred concentrations: Information Systems, Cybersecurity, Business and Finance)
Minimum 1-2 years of work experience in technology, security, or management consulting
Relevant work experience in Compliance, Risk Management, Privacy, or Cybersecurity
Experience with Governance, Risk, and Compliance (GRC) tools (e.g., One Trust, Logic Gate)
Nice-to-haves
Effective in a fully remote working environment
Certification or relevant technical licenses (e.g., CIPP, CISSP, CISA)
Advanced degree in relevant field (JD, MBA)
Background or experience working with global organizations
Role Compensation and Benefits
Salary range: $85,000 - $120,000 + Bonus
20 days of annual paid-time-off (PTO)
HRA - Healthcare Reimbursement Agreement (Medical + Dental/Vision & Qualifying Expenses)