Job description
Job Title: Remote Senior Cybersecurity & Compliance Consultant (HIPAA, NIST & SOC 2)
Job Summary:
We are seeking a Remote Senior Cybersecurity & Compliance Consultant (HIPAA, NIST & SOC 2) to lead cybersecurity and compliance engagements for clients in healthcare, professional services, and other regulated industries. This role will provide strategic guidance on cybersecurity, risk management, compliance, and security best practices while supporting clients with assessments, remediation efforts, ongoing security initiatives, and virtual CISO (vCISO) engagements. The ideal candidate will have strong technical cybersecurity expertise and in-depth knowledge of HIPAA, NIST, and SOC 2, with the ability to lead client meetings, explain compliance obligations, provide actionable guidance, and translate complex security and compliance requirements into practical, business-focused recommendations. The successful candidate will help organizations strengthen their cybersecurity programs while meeting applicable regulatory and industry standards.
Key Responsibilities:
Conduct cybersecurity and compliance assessments.
Evaluate and document clients' security postures.
Identify and assess cybersecurity risks and security gaps.
Develop and recommend remediation plans.
Assist in the development and implementation of security policies and procedures.
Prepare professional cybersecurity and compliance assessment reports.
Deliver security awareness and phishing training programs.
Support virtual CISO (vCISO) engagements.
Provide strategic guidance on cybersecurity, risk management, compliance, and security best practices.
Support clients with assessments, remediation efforts, and ongoing security initiatives.
Lead client meetings and security-related discussions.
Explain applicable compliance obligations and requirements.
Provide clear, actionable cybersecurity and compliance guidance.
Translate complex security and compliance requirements into practical, business-focused recommendations.
Help organizations strengthen their cybersecurity programs while meeting applicable regulatory and industry standards.
Perform other duties related to the position as assigned.
Qualifications & Requirements:
Proficient level of English (written and spoken).
Ability to communicate effectively with executives, IT teams, compliance officers, and end users.
Strong technical cybersecurity expertise.
In-depth knowledge of HIPAA, NIST, and SOC 2.
Ability to translate complex security and compliance requirements into practical, business-focused recommendations.
Ability to lead client meetings and explain compliance obligations.
Ability to provide actionable guidance and strengthen cybersecurity programs.
Experience supporting clients in healthcare, professional services, and other regulated industries.
Resourceful, accountable, with a strong sense of ownership.
Out-of-the-box thinker, highly adaptable, reliable, self-motivated, and confident.
Strong problem-solving skills with the ability to work independently.
Strong attention to detail and multitasking skills in fast-paced work environments.
Excellent organizational skills with the ability to manage daily operations.
Proficiency in Microsoft Office (Word, Excel, Outlook).
Familiar with standard business tools (email, spreadsheets, document management).
Ability to quickly learn new systems, software, and workflows.
Ability to follow established processes accurately with minimal supervision.
Ability to work U.S. EST (New York) business hours and adapt to business needs.
Interested in long-term career opportunities.
Able to undergo a background check.
Reliable Windows 10+ computer, two monitors, and high-speed internet.
Professional home workstation capable of supporting uninterrupted remote work.
Compensation & Benefits:
100% remote work.
Compensation in USD.
Full-time position with 40 hours weekly.
Please note that this is a long-term opportunity.
Great work environment with potential for growth.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.