GRC Analyst

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview:

We are seeking a seasoned Senior Security Advisor to join our Security Advisory Services team. This role is designed for an experienced security professional who can lead complex advisory engagements, build trusted client relationships, and connect technical security considerations to business risk and organizational priorities. You will work with executive leaders, technology teams, security practitioners, and business stakeholders to assess current capabilities, define pragmatic improvement plans, and guide clients through security program decisions.

Responsibilities:

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions that clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations with confidence to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, how their attacks work, and the tools they use.
Lead multi-competency cybersecurity maturity assessments, gap assessments, risk assessments, security program reviews, and control-effectiveness evaluations.
Assess capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce polished executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply recognized frameworks and requirements such as NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS where relevant to the engagement.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.

Qualifications:

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create clear executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills with the ability to manage scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and the ability to operate effectively when information is incomplete or stakeholder perspectives differ.
Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.
Experience with regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

Originally posted on Himalayas

Job Description

Company Overview:

Position Overview:

Responsibilities:

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions that clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations with confidence to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, how their attacks work, and the tools they use.
Lead multi-competency cybersecurity maturity assessments, gap assessments, risk assessments, security program reviews, and control-effectiveness evaluations.
Assess capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce polished executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply recognized frameworks and requirements such as NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS where relevant to the engagement.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.

Qualifications:

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create clear executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills with the ability to manage scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and the ability to operate effectively when information is incomplete or stakeholder perspectives differ.
Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.
Experience with regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

Originally posted on Himalayas

Job Description

Company Overview:

Position Overview:

Responsibilities:

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions that clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations with confidence to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, how their attacks work, and the tools they use.
Lead multi-competency cybersecurity maturity assessments, gap assessments, risk assessments, security program reviews, and control-effectiveness evaluations.
Assess capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce polished executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply recognized frameworks and requirements such as NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS where relevant to the engagement.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.

Qualifications:

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create clear executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills with the ability to manage scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and the ability to operate effectively when information is incomplete or stakeholder perspectives differ.
Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.
Experience with regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

Originally posted on Himalayas

Job Description

Company Overview:

Position Overview:

Responsibilities:

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions that clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations with confidence to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, how their attacks work, and the tools they use.
Lead multi-competency cybersecurity maturity assessments, gap assessments, risk assessments, security program reviews, and control-effectiveness evaluations.
Assess capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce polished executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply recognized frameworks and requirements such as NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS where relevant to the engagement.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.

Qualifications:

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create clear executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills with the ability to manage scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and the ability to operate effectively when information is incomplete or stakeholder perspectives differ.
Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.
Experience with regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

Originally posted on Himalayas