Senior Information Security Consultant

Company: eSentire
Location: Seattle
Posted on: October 30, 2024

Job Description:

eSentire is on a mission to hunt, investigate and stop cyber threats before they become business disrupting events. We were founded on the premise that if you can't find a solution, you build it. Entrepreneurship and innovation are in our DNA. Our culture is based on transparency, teamwork, and continuous innovation.
As the authority in Managed Detection and Response, we protect the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats. The Opportunity The Senior Information Security Consultant will serve as the principal resource for delivering eSentire's Advisory Services to their assigned client(s). The primary responsibility of this role is to integrate advanced technical, regulatory, and operational expertise with senior management capabilities to deliver comprehensive information security programs, risk management strategies, and regulatory guidance to clients.This individual will collaborate closely with peers on the Advisory Services team to develop and execute comprehensive security program roadmaps, as well as conduct individual assessments and deliver tailored services.Additionally, this individual will be responsible for identifying opportunities to enhance brand and marketing recognition by pinpointing potential conferences, speaking engagements, and other relevant events.This individual will also be responsible for conducting ongoing research and monitoring trends in the broader threat landscape to provide valuable support to the eSentire sales and delivery teams.
Responsibilities

• Provide expert consultation to clients and prospective clients to thoroughly understand and evaluate their information security program requirements. Deliver tailored recommendations that align with business objectives, regulatory standards, and contractual obligations.
• Formulate comprehensive security and cyber resilience strategies/roadmaps that are closely aligned with the client's business objectives.
• Support the development of Incident Response Plans, Vendor Risk Management strategies, and Information Security Policies.
• Conduct Incident Response tabletop exercises by creating and moderating various hypothetical scenarios.
• Design, evaluate, and execute assessments and services in accordance with industry frameworks and compliance requirements.
• Conduct thorough security architecture reviews to identify gaps and risks and provide strategic recommendations to enhance the client's security posture.
• Develop security metrics and key performance indicators
• Prepare and present comprehensive security and risk assessment reports to the board and executive team.
• Translate complex technical findings into clear, actionable insights for non-technical stakeholders.
• Track ongoing program maturation progress with assigned client(s)
• Develop strategies to overcome or eliminate obstacles that may hinder effective security program delivery
• Stay updated on the latest security trends, threats, and best practices to inform presentations.
• Create and maintain client relationships, consistently searching for new, potential clients who may benefit from services and products provided
• Other duties shall be assigned as required Requirements
  • Bachelor's Degree equivalent required.
  • (5+) years of previous technical experience in secure engineering/system architecture.
  • (5+) years of previous experience with addressing governance, risk, and compliance objectives.
  • (10+) years of technology and/or information security management experience.
  • Relevant certifications (e.g., CISSP, CISM) are a plus.
  • Strong understanding of NIST CSF, ISO 27001, CIS, NIST 800-53, MITRE, PCI, HIPPA, SOC and other security & compliance frameworks
  • Excellent written and verbal communication, listening, and client management skills.
  • Demonstrated technical, regulatory, and operations management knowledge as well as consultative skills.
  • Ability to articulate complex technical, regulatory, and operations management information to clients based on relevant assessment details and interpretation of findings.
  • Self motivated, strong analytical skills and detail oriented.
  • Goal oriented, with a proven history of meeting or exceeding client satisfaction expectations.
  • Capability to provide support across various time zones. Our Culture and Values At eSentire we work in a collaborative and innovative work environment. We work with brilliant and passionate people who strive and encourage others to do their best. eSentire's idea-rich environment welcomes creative and sometimes unconventional perspectives!
    
    We celebrate diversity, operating with mutual respect and consideration, in an environment that fosters inclusivity for all. We believe that a variety of perspectives, backgrounds, and experiences make us stronger - if you're enthusiastic about this opportunity but don't meet every qualification, we encourage you to apply anyway. It takes a diverse set of thoughts, cultures, backgrounds, and perspectives to be a true market leader.
    Total Rewards We believe in rewarding performance and providing comprehensive benefits tailored to support your well-being. Our package includes comprehensive health benefits, a flexible vacation plan, and participation in our company-wide equity program, allowing you to share in the success and growth of our organization. Accommodation
    
    If you have any accessibility requirements during the recruitment process, please reach out to our HR team at aoda@esentire.com and any accommodation needs will be addressed upon request. Your talents and unique perspectives are valued, and we look forward to the opportunity to work together to build a more inclusive future.
    It's our mission at eSentire to protect our customers 24/7/365 and we extend this conviction to job seekers. During the application and interview process, eSentire will communicate with you from one of our corporate "@esentire.com" email addresses, never from a public email address. We strive to provide a welcoming, respectful, and thorough interview process, providing the candidate with ample opportunity to spend time with the hiring manager, recruiter, and future colleagues face to face, or using a video conference technology. #LI-SJ1
    #LI-Remote
    #J-18808-Ljbffr

Keywords: eSentire, Kent , Senior Information Security Consultant, Professions , Seattle, Washington