GRC CMMC Consultant - Tampa - InfoHedge Technologies LLC

    InfoHedge Technologies LLC
    Description

    About Us


    Thrive is a rapidly growing technology solutions provider focusing upon Cloud, Cyber Security, Networking, Disaster Recovery and Managed Services. Our corporate culture, engineering talent, customer‑centric approach, and focus upon "next generation" services help us stand out amongst our peers. Thrive is on the look‑out for individuals who don't view their weekdays spent at "a job", but rather look to develop valuable skills that ignite their passion and lead to a CAREER. If you're attracted to a "work hard, play hard" environment, seeking the guidance, training and experience necessary to build a lucrative career, then welcome to THRIVE

    Position Summary


    The Governance, Risk, and Compliance (GRC) CMMC Consultant is a client‑facing role that helps build, manage, and maintain cybersecurity compliance programs for clients across various industries, primarily within the government sector where most clients will be government contractors or sub‑contractor providers that need to comply with government regulations. The GRC Consultant supports the Assessment, Program Establishment, and Support work required for Abacode's clients to become and remain compliant with their respective cybersecurity and privacy frameworks. The GRC Consultant develops client reporting and metrics, updates dashboards, and collects and validates evidence/artifacts.

    Primary Responsibilities

    • Participates in day‑to‑day operations and client engagement activities across various client projects involving compliance readiness and security assessments
    • Supports the Abacode GRC Service Delivery team with conducting on‑going and new assessments of controls, processes, and procedures across multiple clients and compliance standards: NIST 800‑171 (CMMC), SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF and CIS
    • Supports clients with maintaining compliance with such frameworks by guiding them through control execution and evidence collection and review
    • Supports compliance, policy, procedural, and technical review of client information security and/or compliance program(s), providing maturity and improvement recommendations based on experience and industry best practices
    • Performs security controls gap analysis and identification based on compliance mandates, standards, and security benchmarks
    • Documents security controls inventory of client systems within the GRC portals
    • Conducts general cybersecurity Risk Assessments
    • Provides tactical guidance aimed at helping clients meet compliance requirements across applicable security standards and frameworks
    • Performs audit liaison activities, guiding and assisting clients with audit preparation, evidence identification and gathering, and responding to audit questions
    • Manages compliance requirements across multiple clients in parallel
    • Works with clients to identify opportunities for improvement for client's security controls
    • Builds internal company partnerships and collaborates with team leaders to determine the company's services, delivery criteria, and solutions for issues that may arise
    • Supports evidence collection for internal Abacode/Thrive audits
    • Identifies and makes suggestions for improvements when problems and/or opportunities arise
    • Keeps up to date with developments in the cybersecurity, privacy, and GRC areas of specialization

    Basic Qualifications

    • Bachelor's Degree in related field or relevant work experience
    • 2‑4 years of experience conducting and documenting security risk assessments
    • Experience working in a client‑facing consulting or service delivery capacity
      Experience managing multiple clients/projects in parallel
      • Experience with general project management and customer success/service is strongly desired
    • Demonstrated understanding of control frameworks and regulatory requirements for NIST 800‑171, NIST‑CSF, SOC‑2, and ISO 27001
    • Preferred experience with: HIPAA, PCI‑DSS
    • Good understanding of the Department of Defense CMMC ruling and implications for the Defense Industrial Base
    • Proven ability to assess risks and controls and identify opportunities for improvement.
    • Excellent written and verbal communication skills along with excellent interpersonal skills. Able to communicate confidently in a clear, concise, and articulate manner – verbally and written in the documentation produced
    • Broad knowledge of information technology (basic networking principles), information security (such as identity and access management), and critical data protection practices (basic principles of encryption and sensitive data protection) is highly desirable.
    • Preferred prior experience working with GRC systems/tools.
    • Preferred prior experience with general IT and Security auditing.
    • Self‑motivated, positive attitude, and a team player.
    • Ability to work independently and with minimal supervision.

    #J-18808-Ljbffr

  • Only for registered members Tampa Full time

    +Job summary · The Governance, Risk, and Compliance (GRC) CMMC Consultant is a client-facing role that helps build, · manage,and maintain cybersecurity compliance programs for clients across various industries.QualificationsBachelor's Degree in related field or relevant work expe ...

  • Only for registered members Tampa

    The Governance, · Risk,and Compliance (GRC) CMMC · Consultant is a client-facing role that helps build, · manage,and maintain cybersecurity compliance programs for clients across various industries, · primarily within the government sector where most clients will be government co ...

  • Only for registered members Tampa

    Senior associates are primarily responsible for hands-on project execution. Experienced senior associates have, or are working towards, specialization in one or more service lines and are assigned to projects accordingly. · ...

  • Only for registered members Tampa

    This is a local contract opportunity for an experienced IT professional who can provide both hands-on and remote systems support. · ...

  • Only for registered members Tampa Freelance

    This role is a local contract opportunity for an experienced IT professional who can provide both hands-on and remote systems support.The contractor will manage their own schedule while responding to tasks and service requests within agreed upon timeframes. · Perform on-demand IT ...

  • Only for registered members Tampa Part time

    This role is a local part-time opportunity for an experienced IT professional who can provide both hands-on and remote systems support. · Proven experience providing IT support in small to mid-size environments · Familiarity with cybersecurity or compliance-driven organizations · ...

  • Only for registered members Tampa

    We are not a staffing firm or agency. Paragon Cyber Solutions is an award-winning, woman-owned small business providing cybersecurity, CMMC, · and IT services to federal and commercial clients. This role is a local contract opportunity for an experienced IT professional who can p ...

  • Only for registered members Tampa Part time

    Paragon Cyber Solutions es una empresa pequeña dirigida por mujeres que proporciona servicios de ciberseguridad e IT a clientes federales y comerciales. · ...

  • Only for registered members Tampa Part time

    This IT support consultant will provide on-demand IT services for Paragon Cyber Solutions. Responsibilities include endpoint setup, tenant administration, · toubleshooting endpoint issues and implementing security best practices.ResponsibilitiesPerform on-site updates and mainten ...

  • Only for registered members Tampa Contract

    This role is a local part-time, contract opportunity for an experienced IT professional who can provide remote systems support and hands-on support in our Tampa, FL offices. · ...

  • Only for registered members Tampa

    We are seeking a highly skilled Security Consultant to join our team at GuidePoint Security. The successful candidate will have experience in modern technology architectures and be able to implement controls in support of various cyber security standards. · As a Security Consulta ...

  • Only for registered members Tampa

    Schellman is seeking a Penetration Tester to conduct hands-on project execution. The ideal candidate will have experience in security domains, attention to detail, and excellent communication skills. · ...

  • Only for registered members Tampa, FL Part time

    We are seeking an experienced IT professional to provide on-demand IT services as an independent contractor. The role involves providing remote systems support and hands-on support in our Tampa offices. Initial monthly hours will range from 10-20 with the potential to increase ov ...

  • Only for registered members Tampa, FL Remote job

    GuidePoint Security provides trusted cybersecurity expertise... · Position Duties · Deliver world-class cyber security assessment and advisory services across multiple Compliance offerings. · Work effectively as a team member on large engagements. · ...

  • Only for registered members Tampa

    Kentro is seeking a visionary Senior Data Security Architect to lead technical authority for USSOCOM Zero Trust Data Visibility program. · ...

  • Only for registered members Clearwater

    We are seeking an experienced Services leader and Cyber Compliance professional to lead the growth and execution of our CMMC Compliance practice.This role is responsible for shaping and scaling our CMMC compliance services, owning customer delivery outcomes, and serving as a seni ...

  • Only for registered members Clearwater

    112Cyber is seeking an experienced Services leader to lead the growth and execution of our CMMC Compliance practice. · ...

  • Only for registered members Clearwater, FL Remote job

    112Cyber is seeking an experienced Services leader and Cyber Compliance professional ready to lead the growth and execution of our CMMC Compliance practice. · ...

  • Only for registered members Clearwater

    We are looking for a Compliance SME to assist organizations in solidifying and strengthening their security posture while also conducting assessments for those pursuing certification. · ...

  • Only for registered members Clearwater

    +Identify and engage potential clients, drive sales opportunities for the CMMC compliance platform. · + · Conduct thorough market research to identify potential leads and target industries. · + · ...

  • Only for registered members Clearwater Full time

    +Job summary+We are looking for a Compliance SME to assist organizations in solidifying and strengthening their security posture while also conducting assessments for those pursuing certification. · + · Leading cybersecurity gap assessments aligned with NIST SP and Cybersecurity ...

Jobs
>
Tampa