Cybersecurity Consultant
About RivialRivial Data Security helps banks and credit unions run cybersecurity programs that stand up to both regulators and real-world threats. We pair our GRC software platform with hands-on services, including quantitative cyber risk assessments, IT audits, and policy and gap assessments, so financial institutions can measure their risk in real terms and meet regulatory expectations without guesswork. Our team works side by side with the institutions we serve. The work you do here directly protects community banks, credit unions, and the people who rely on them.
Description:
Rivial Data Security is seeking a Cybersecurity Consultant to join our information security governance solutions team in a remote capacity, with up to 10% of time traveling for client on-site work. As part of our team, you will help clients identify security risks and/or gaps in compliance with a focus on providing consulting and advisory services to improve governance controls across people, processes, and technology. You will also work with internal teams on governance, risk, and compliance related projects. While building and maintaining client relationships you will interact with clients, partners, and vendors through video calls, voice calls, on-site meetings, and email.
Responsibilities:
Serve as the consultant for Rivial clients in the implementation and delivery of our solutions. Our solutions pair our SaaS platform with related services. Our services include, but are not limited to:
- Provide expert advice and recommendations on best practices for information security controls, technologies, and processes; tailoring advice based on client maturity and goals
- Conduct IT Audits to identify gaps and areas for improvement in control implementation
- Conduct information security assessments to identify weaknesses and vulnerabilities in client systems
- Conduct policy assessments to identify gaps and areas for improvement in information technology-related governance documentation
- Develop and implement policies and procedures in coordination with clients
- Provide strategic, operational, and tactical recommendations tailored to each client to remediate identified risks and improve the client’s security and compliance posture according to industry best practices and compliance requirements
- Conduct incident response planning, documentation, and exercises for and with clients
- Conduct security awareness training and social engineering tests for clients' employees to promote a culture of security and risk awareness
- Create and perform cybersecurity reporting to client Board of Directors and Senior Management
- Assist clients through regulatory IT examination and audit processes by providing expert consulting before, during, and after engagements
- Partner with other consultants in a collaborative setting to support and assist the execution and delivery of solutions while building and enhancing client service skills
- Build strong client relationships using clear and consistent communication and management techniques
- Adapt to changing internal and external requirements to promote timely completion of business and professional reports and services
- Develop and maintain expert-level proficiency in the Rivial Cybersecurity Management Platform
- Collaborate with clients' IT teams to implement security measures and controls and ensure compliance with regulatory requirements
- Deliver solutions on time and within budget while meeting success metrics to maintain high client satisfaction
- Create and review reports generated by the team, platform, or vendor tools to ensure accuracy and increase value to clients
- Leverage AI tools responsibly and creatively to improve efficiency, support process automation, and enable accuracy, security, and alignment with client expectations
- Stay up to date with the latest information security threats, vulnerabilities, and technologies
Required Skills:
- Solid verbal and written communication skills, organizational skills, and attention to detail, with the ability to explain technology concepts to non-technical people· Ambitious and goal-oriented, with initiative to work until job is complete· Ability to maintain composure and professionalism in an interrupt-driven environment· Ability to manage multiple and changing priorities/tasks· Ability to simultaneously manage multiple diverse client engagements· Ability and initiative to work collaboratively or independently as a given situation dictates· Ability to work remotely and produce consistent results under minimal supervision· Demonstrated passion for continuous self-study and thought leadership, proactively staying current with emerging cybersecurity threats, evolving regulatory requirements, and advancements in AI/ML to inform risk-based recommendations and GRC strategy· Solid documentation experience with Microsoft® Word, Excel and PowerPointMinimum Qualifications· Bachelor’s degree or equivalent military or work experience· Minimum 8 years’ professional experience in IT, cybersecurity, compliance, risk, or a related field· At least one of the following certifications: CISSP, CISM, CISA· Familiarity with common frameworks, guidance, and regulations such as NIST CSF 2.0, SOC 2, ISO 27001, PCI DSS, FFIEC IT Handbooks· Must be a US Citizen