Seeking a Senior Associate Consultant in Security Governance, Risk, and Compliance (GRC) focusing on compliance assessments for enterprise environments using frameworks like NIST and ISO, managing client engagements, and developing remediation plans.
AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.
We are seeking a Consultant specializing in Security Governance, Risk, and Compliance (GRC) with a strong focus on security compliance assessments, particularly against NIST frameworks. This role requires a combination of security and consulting subject matter expertise, and client-facing communication skills to deliver high-quality solutions tailored to each client’s unique security and compliance needs.
The ideal candidate will be proactive, detail-oriented, and capable of independently driving workstreams while contributing to the broader success of client engagements. This is a challenging yet rewarding role that provides an opportunity to work with diverse set of clients across multiple industries.
Security Compliance Specifics
- Apply compliance frameworks (e.g., NIST, ISO, etc.) to assess, design, and implement security controls for enterprise environments.
- Conduct compliance gap assessments, develop remediation plans, and guide clients through audit readiness processes.
- Create and maintain key documentation such as risk assessments, controls mapping, compliance roadmaps, and policies tailored to client needs.
- Ensure alignment with regulatory requirements and standards, such as NIST, CMMC, ISO 27001, or SOC 2, based on the engagement scope.
- Stay informed of evolving compliance frameworks, regulatory changes, and security best practices to provide clients with up-to-date and actionable recommendations.
- Support clients in developing and maturing their GRC programs, with an emphasis on measurable security improvement and compliance sustainability.
Client Delivery
- Manage and run defined workstreams with minimal oversight, ensuring continuity and success across client engagements.
- Maintain workstream RAID documentation (Risks, Assumptions, Issues, Dependencies) and proactively mitigate risks to keep projects on track.
- Communicate project status, risks, and decisions clearly and effectively to clients, ensuring transparency and alignment.
- Produce client-ready drafts of deliverables with minimal rework, adhering to professional quality standards.
- Leverage QA checklists and processes to identify issues early and ensure consistency across deliverables.
- Analyze tradeoffs, present options, and provide well-reasoned recommendations, escalating challenges along with proposed solutions when necessary.
- Independently sustain progress on client engagements during critical periods, maintaining momentum for up to 5–10 business days if required.
- Contribute to client knowledge transfer and training efforts, ensuring operational teams are equipped to maintain compliance post-engagement.
Qualifications
- Undergraduate technical degree in Engineering, Computer Science, IT Management, Cybersecurity, or related field preferred, but not required.
- Minimum of 4-6 years’ professional, relevant experience, with at least 2 years in a client facing role.
- 1–2 professional and/or technical certifications in IT security, cloud security, or application security (e.g., CompTIA Security+, ISC^2 CC, etc.)
- Solid understanding of common compliance frameworks (e.g., NIST, ISO, CMMC, etc.) and their application in enterprise environments.
- Strong technical knowledge of what good evidence looks like for assessments beyond policy and procedure language. A technical assessment will be performed during the interview process to confirm this critical skill.
- Knowledge of cybersecurity technologies (e.g., SIEM, vulnerability management, endpoint security) and their integration with compliance mandates.
- Hands-on experience with tools and platforms supporting GRC workflows (e.g., Archer, ServiceNow GRC, or similar).
- Excellent verbal and written communication skills (high proficiency in Microsoft Office Suite required).
- Comfortable addressing and presenting to groups in virtual or in-person settings.
- Strong problem-solving abilities, capable of addressing complex and abstract challenges.
- Exceptional interpersonal skills, with the ability to connect and collaborate with diverse personalities and stakeholders.
The compensation range indicated in this posting reflects the On-Target Earnings (“OTE”) for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate’s relevant experience, qualifications, and geographic location.
Why AHEAD:
Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.
We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.
USA Employment Benefits include:
- Medical, Dental, and Vision Insurance
- 401(k)
- Paid company holidays
- Paid time off
- Paid parental and caregiver leave
- Plus more! See benefits https://www.aheadbenefits.com/ for additional details.
Use of AI:
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, or to capture recordings and create transcriptions or summaries during interviews. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.
If you would like more information about how your data is processed, please refer to the Candidate Privacy Notice or contact us at [email protected].
You may opt-out of the review or analysis of your application and resume by AI tools by using the General Application. Please include the role you wish to apply for in the Additional Information field. You may also choose to opt-out of recording and transcription at any time, including after joining an interview. Candidates will not be penalized for choosing to opt-out.
Top Skills
Archer
Cloud Security
Endpoint Security
Iso
Microsoft Office Suite
Nist
Servicenow Grc
SIEM
Vulnerability Management
Similar Jobs
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
The Senior Regulatory Compliance Consultant provides support for regulatory compliance, risk assessment, consulting for financial services, and compliance audits.
Top Skills:
Compliance Management SystemRegulatory ComplianceRisk Assessment
Software • Analytics • Hospitality
The Product Manager will oversee product development, manage project timelines, collaborate with teams, ensure data integration, and communicate technical needs effectively.
Top Skills:
APIsMySQLSQLSQL Server
HR Tech • Information Technology • Professional Services • Sales • Software
As a Mid Market Account Executive, you'll manage the sales cycle from prospecting to closing with a focus on mid-market companies. Responsibilities include building business relationships, presenting product demos, managing Salesforce CRM, and attending trade shows.
Top Skills:
SaaSSalesforce CRM
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
