Security Consultant

Primary Job Title: Security Consultant Alternate / Related Job Titles: Information Security Consultant ISO 27001 / ISO 42001 Consultant Cybersecurity & Privacy Consultant Risk, Compliance & Governance Consultant AI Governance & Information Security Advisor Location & Onsite Flexibility: Remote — Alaska (AK) Travel up to 33% as needed Job Details (Direct Hire) Position Type: Direct Hire Start: As Soon As Possible Salary Range: $125,000 – $150,000 per year Role Overview The Security Consultant supports clients in achieving and maintaining ISO certifications and advancing mature information security, privacy, and AI governance programs. This role plays a critical part in guiding organizations through certification readiness, audit preparation, and long-term program management across standards such as ISO 27001, 27701, 27017, and ISO/IEC 42001. The consultant engages directly with clients, leads assessments and workshops, develops management system documentation, and contributes to ongoing business growth in a collaborative, entrepreneurial consulting environment.

Key Responsibilities

Client Engagement & Advisory

• Partner with client leadership on all aspects of engagements, deliverables, and governance reviews
• Lead client calls, presentations, onsite meetings, and serve as primary point of contact
• Prepare executive-ready decks, reports, and meeting materials

Risk, Compliance & Certification Support

• Conduct risk assessments, gap analyses, and stakeholder interviews
• Assess practices and controls against ISO 27001, ISO 27701, ISO 27017, SOC 2, NIST, and ISO 42001
• Support implementation of governance structures, controls, and management systems
• Prepare clients for certification audits through evidence review and readiness validation
• Provide audit support, including onsite participation when required

Documentation & Program Management

• Develop and review policies, procedures, standards, and guidance documents
• Create and maintain project plans, milestones, and accountability structures
• Communicate progress, risks, and dependencies clearly with clients and internal teams

Continuous Improvement & Growth

• Maintain awareness of evolving information security, privacy, and AI regulations
• Support AI governance initiatives, impact assessments, and responsible AI frameworks
• Identify and develop new business opportunities within existing client relationships
• Coach and mentor team members as needed

Required Skills & Qualifications Education

• Bachelor’s Degree (required)

Experience

• 5+ years of progressive experience in information security, privacy, risk, compliance, or IT audit
• Proven experience delivering consulting projects with minimal oversight

Required Expertise

• Advanced knowledge of information security frameworks and controls
• Hands-on experience with ISO 27001 and related standards (27701, 27017), SOC 2, and NIST
• Strong understanding of privacy regulations including GDPR and CCPA/CPRA
• Excellent written communication skills for executive and technical audiences
• Strong analytical, problem-solving, and presentation skills in client-facing environments

Preferred / Nice-to-Have Qualifications

• Experience with ISO/IEC 42001, AI risk assessments, and AI governance programs
• Knowledge of global AI regulations such as the EU AI Act
• Experience authoring and facilitating tabletop exercises and scenario-based incident or AI event simulations
• Relevant certifications such as:
• ISO 27001 Lead Implementer or Lead Auditor
• CISA
• CISSP
• CIPP
• Emerging ISO 42001 credentials

Additional Skills & Abilities

• Strong leadership and executive presence
• Superior verbal and written communication skills
• Advanced proficiency with Microsoft Office tools
• Experience leveraging GenAI tools to improve consulting deliverables
• High attention to detail and discretion with confidential information
• Ability to manage multiple priorities in a deadline-driven environment
• Skilled at influencing, negotiating, and managing organizational change
• Ability to build and maintain trusted client relationships

About the Company

Our client is a leading provider of information security, data privacy, and business continuity advisory services. With a near 100% certification success rate, the organization helps clients mitigate cyber risk, achieve audit readiness, and build resilient, standards-based management systems that deliver long-term value and zero non-compliance outcomes. About GTT GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company based in Alaska. We proudly support diverse and inclusive workplaces and partner with Fortune 500 financial services, technology, life sciences, biotech, utility, and retail organizations across the U.S. and Canada. Job Number: 26-01115 #LI-GTT #LI-Remote #gttjobs Remote About the Company: GTT Apply tot his job Apply To this Job