Principal Consultant, Security Governance

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Principal Consultant, Security Governance in United States.

This is an exceptional opportunity for an experienced cybersecurity and governance expert to lead high-impact consulting engagements focused on information security, compliance, privacy, and risk management. In this role, you will advise enterprise clients on strengthening their security posture, aligning governance programs with business objectives, and navigating complex regulatory environments across industries. You will work closely with executive stakeholders, including CISOs and senior leadership teams, to deliver strategic guidance, risk assessments, security roadmaps, and compliance initiatives involving modern cloud and AI-driven technologies. The position combines technical expertise, client-facing leadership, and strategic consulting within a collaborative, innovation-focused environment. As part of a highly specialized cybersecurity practice, you will contribute to large-scale governance programs, mentor peers and clients, and help organizations improve resilience against evolving cyber and compliance risks. This remote role also offers opportunities to travel and engage directly with clients on mission-critical initiatives across the United States.

Accountabilities:

• Lead information security governance, risk, compliance, and privacy consulting engagements for enterprise clients across multiple industries.
  • Conduct security assessments, compliance reviews, and governance evaluations aligned with frameworks such as ISO 27001, NIST CSF, PCI DSS, HIPAA, CMMC, FERPA, and related standards.
  • Develop strategic security roadmaps, remediation plans, and governance recommendations tailored to each client’s operational and regulatory environment.
  • Advise executive leadership teams, including CISOs, CIOs, CSOs, and Boards of Directors, on cybersecurity strategy, organizational risk, AI governance, and compliance initiatives.
  • Design and maintain customized security policies, procedures, standards, and governance documentation that align with industry best practices and business objectives.
  • Lead PCI and CMMC advisory engagements, including readiness assessments, gap analyses, reports on compliance, and audit preparation activities.
  • Facilitate tabletop exercises, incident response simulations, and after-action reporting to strengthen organizational resilience and preparedness.
  • Collaborate with cross-functional cybersecurity teams on cloud governance, security program development, advisory services, and large-scale transformation initiatives.
  • Analyze organizational risks, evaluate technical and administrative controls, and deliver actionable findings and recommendations to both technical and non-technical audiences.
  • Support internal cybersecurity operations through documentation reviews, peer collaboration, process improvement initiatives, and knowledge sharing activities.

Requirements:

    - 5–8 years of experience in cybersecurity consulting, information security governance, risk management, compliance, or related advisory roles.
    - Strong expertise conducting security and compliance assessments across frameworks such as ISO 27001, PCI DSS, HIPAA, NIST CSF, NIST 800-171, and CMMC.
    - Proven ability to lead client-facing consulting engagements and present complex cybersecurity concepts to executive and technical stakeholders.
    - Experience developing security governance frameworks, policies, standards, procedures, and risk management strategies for enterprise organizations.
    - Familiarity with cloud environments such as AWS, Microsoft Azure, or Google Cloud Platform, including cloud security governance practices.
    - Possession of at least one professional certification from both recognized governance and auditing domains, such as CISSP, CISM, CISA, ISO 27001 Lead Implementer, ISO Lead Auditor, GSNA, or equivalent certifications.
    - Strong analytical, organizational, communication, and problem-solving skills with the ability to manage multiple client engagements simultaneously.
    - Ability to work independently and collaboratively in fast-paced consulting environments while adapting to changing client and regulatory requirements.
    - Experience supporting PCI QSA or CMMC-related initiatives is strongly preferred.
    - Knowledge of AI governance, AI security frameworks, or AI-focused certifications is considered a strong advantage.
    - Bachelor’s degree in Information Security, Computer Science, Engineering, IT, or related field preferred, or equivalent professional experience.
    - Willingness to travel up to 30% to client locations across the United States as needed.

Benefits:

        - Fully remote work environment within the continental United States.
        - Opportunity to work on high-profile cybersecurity, governance, cloud, and AI transformation projects.
        - Collaborative and innovation-driven culture focused on professional growth and knowledge sharing.
        - Exposure to executive-level consulting engagements across multiple industries and enterprise environments.
        - Ongoing learning and certification development opportunities in cybersecurity, compliance, cloud, and AI governance.
        - Flexible and dynamic work environment with opportunities to contribute to strategic initiatives and emerging technologies.
        - Inclusive workplace culture that values diversity, collaboration, and continuous improvement.
        - Opportunity to work alongside highly experienced cybersecurity professionals and industry experts.
        - Competitive compensation and comprehensive benefits package.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1