> Markdown version of [/jobs/ext/3759178-security-solutions-consultant-cyber-risk-and-strategy](https://www.wearedevelopers.com/jobs/ext/3759178-security-solutions-consultant-cyber-risk-and-strategy). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Solutions Consultant - Cyber Risk and Strategy - **Company:** Wide Technology - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Software as a Service, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Microsoft Office, PCI Data Security Standards, Microsoft PowerPoint, Program Design Languages, Software Engineering, IT General Controls (ITGC), EHR Systems, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Atlassian Tools, RSA Archer Platform, CIS Benchmarks, Servicenow - **Published:** October 15, 2026 - **Apply:** https://www.builtincolorado.com/job/security-solutions-consultant-cyber-risk-and-strategy/11681084?handler=ApplyRedirect ## About the Role * Foundational knowledge of common GRC and security frameworks, such as NIST CSF 2.0, NIST SP 800-53, ISO 27001/27002, CIS Controls v8, SOC 2 Trust Services Criteria, PCI DSS v4, HIPAA Security Rule, and SOX ITGC * Understanding of core GRC concepts: risk identification and scoring, control design vs. control effectiveness, separation of duties, three lines of defense, the audit lifecycle, and data privacy principles * Strong proficiency with Microsoft Excel, PowerPoint, and Word Foundational consulting delivery competencies, including: * Structured discovery: ability to support discovery interviews, take thorough notes, gather documentation and evidence, and organize information into clear, structured outputs * Gap analysis: ability to compare documented controls and practices against framework requirements and clearly document gaps for team review * Technical communication: ability to draft clear, accurate written findings and summaries, and to communicate status and questions concisely to the engagement team and client counterparts * Workshop support: participate in discovery sessions, risk workshops, and working group meetings; help prepare materials and capture decisions and action items * Deliverable quality: strong attention to detail and a track record of producing accurate, clearly organized work products on time and to standard * Engagement collaboration: work effectively within project teams; communicate progress and blockers proactively to the engagement lead; adapt to shifting priorities and client needs Preferred * Bachelor's degree in Information Security, Risk Management, Business, or a related field * Industry certifications demonstrating security or GRC knowledge, such as Security+, ISC2 CC, SSCP, GRCP, or equivalent; progress toward CISA, CRISC, CISM, or CISSP is a plus, as are platform certifications from ServiceNow, OneTrust, or Archer * Exposure to enterprise environments in financial services, healthcare, retail, manufacturing, or public sector, particularly where compliance is shaped by regulatory requirements (SOX, HIPAA, PCI DSS, DORA, FedRAMP) * Prior experience at a professional services firm, audit firm, or systems integrator, or within an internal audit or compliance function * Familiarity with additional frameworks and methods such as NIST RMF, COBIT, FedRAMP, DORA, or FAIR risk quantification Key Competencies * Foundational GRC knowledge and reliable execution of assigned work * Attention to detail, delivery quality, and individual accountability * Clear written and verbal communication * Coachable, collaborative team contributor with a strong growth orientation Success in this role means completing assigned GRC work accurately and on time, earning the trust of engagement leads and client teams through reliable performance, rapidly building domain knowledge and consulting skills, and contributing to a practice that clients trust and return to while building toward the skills and experience required to step into a Senior Consultant role. ## Description * 2 to 4 years of experience in cybersecurity, IT risk, IT audit, or compliance, with practical exposure to at least one GRC domain (risk management, compliance program management, policy governance, or third party risk) * Experience supporting GRC work in one or more of the following areas: + Risk Management: IT risk assessment support, risk register maintenance, qualitative risk scoring, and risk treatment tracking + Compliance Program Management: gap assessment support, controls mapping, audit readiness activities, evidence collection, and remediation tracking against frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, or SOX ITGC + Policy & Control Governance: policy review and update cycles, mapping controls to frameworks (NIST, CIS, ISO), control testing support, and policy exception tracking + Third Party & Vendor Risk: vendor assessment questionnaire administration, review of vendor responses and evidence, risk tiering support, and remediation tracking + GRC Platforms: ServiceNow GRC, Archer, OneTrust, Vanta, Drata, or equivalent, as an end user or administrator maintaining records, running assessments, or building reports, We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for all! If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process., The Cyber Risk and Strategy Consultant is an individual contributor who executes assigned delivery tasks within WWT's Governance, Risk, Strategy and Compliance practice. Positioned below the Senior Consultant, the Consultant builds practical knowledge across GRC domains, contributes to high quality client deliverables under the guidance of experienced team members, and develops the core consulting skills needed to grow within the practice. The Consultant is a core contributor to GRC delivery, supporting risk assessments and compliance gap analyses, gathering and organizing evidence, reviewing policies and controls, and producing the documentation and analysis that inform client recommendations. They work under the direction of a Senior Consultant, Lead Consultant, or Senior Manager, and are expected to grow steadily toward greater independence and ownership of defined workstream components. Essential Functions: Engagement Delivery * Execute assigned delivery tasks within GRC engagements under the direction of a Senior or Lead Consultant, with accountability for quality, accuracy, and timely completion * Support GRC assessments: assist with current state discovery, gather and organize documentation and evidence, review control environments, document findings, and support maturity scoring against defined frameworks * Perform core GRC work with guidance: populate and maintain risk registers, map controls and identify gaps against frameworks, support policy review and drafting, assist with compliance readiness assessments, and help evaluate third party risk * Draft sections of client deliverables (assessment findings, risk registers, control gap registers, maturity scorecards, and executive summary inputs) for Senior and Lead Consultant review, meeting WWT's professional services quality standards * Participate in discovery sessions, stakeholder interviews, and workshops; capture detailed notes, track action items, and organize findings into structured outputs for team review * Support strategy and program design activities: research regulatory and framework requirements, document current state compliance posture, and contribute analysis to future state program recommendations developed by senior team members Client Engagement * Build effective working relationships with client team members and project stakeholders; establish a reputation for responsiveness, reliability, and accuracy * Communicate status, findings, and open questions clearly and accurately to client counterparts; begin developing the ability to walk through findings in client working sessions * Support client status reporting, meeting coordination, documentation, and action item tracking under the direction of the engagement lead Pursuit & Practice Support * Support pursuit activities as assigned: research client environments and regulatory requirements, and contribute draft content to proposals and SOWs * Contribute to practice development by helping build and maintain reusable delivery assets, assessment templates, control libraries, and knowledge base content * Develop commercial awareness: learn how engagements are scoped, staffed, and delivered, including utilization expectations and how delivery quality connects to client satisfaction Growth & Development * Actively build foundational knowledge across GRC domains and regulatory frameworks through project work, training, certifications, and independent learning * Seek and apply feedback from Senior Consultants, Lead Consultants, and Senior Managers; demonstrate consistent growth in delivery quality, independence, and communication skills * Learn and consistently apply WWT delivery methodologies, tools, and quality standards, Leads complex cybersecurity Governance, Risk, and Compliance workstreams from discovery through delivery. Responsibilities include risk and control assessments, compliance readiness, policy governance, third-party risk, workshops, executive communications, client deliverables, roadmaps, and program design. The role serves as a trusted client advisor, coaches consultants, supports proposals and solution shaping, develops reusable practice assets, and manages scope, quality, risks, dependencies, and stakeholder expectations. Top Skills: ArcherCis Controls V8CobitDoraDrataFairFedrampHipaa Security RuleIso 27001Iso 27002Nist Csf 2.0Nist RmfNist Sp 800-53OnetrustPci Dss V4Servicenow GrcSoc 2Sox ItgcVanta Wipfli, Manage healthcare revenue cycle activities including billing, collections, claims, accounts receivable, denials, payer follow-up, reconciliations, and reimbursement analysis. Support outsourced client engagements, improve operational workflows, communicate with clients, and provide guidance on revenue cycle best practices. Use EHR systems, payer portals, clearinghouses, and Microsoft tools while coordinating domestic and offshore teams and managing multiple client engagements. Top Skills: Billing SoftwareCernerClearinghousesEclinicalworksEhr SystemsEpicMeditechMicrosoft ToolsPayer Portals Atlassian Solution Sales Center of Excellence, Teamwork Collection 25 Minutes Ago In-Office or Remote USA Entry level Entry level Cloud * Information Technology * Productivity * Security * Software * App development * Automation Lead global mid-market sales performance and revenue growth for Atlassian's Teamwork Collection. Develop operating plans, strategic sales plays, inspection rhythms, and scalable go-to-market execution. Partner across sales, SDR, channel, demand generation, product, and marketing teams to increase pipeline, accelerate deal velocity, and expand market presence. Enable account executives and sales managers through field readiness, onboarding, and clear positioning of collaboration and AI solutions. Top Skills: AIEnterprise Saas What you need to know about the Colorado Tech Scene With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation. Key Facts About Colorado Tech * Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey) * Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3 * Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech * Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook) * Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures * Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute