SalariesSign in
AboutPrivacyTerms
Senior Security Consultant, Continuity and Compliance
Pondurance

Senior Security Consultant, Continuity and Compliance

United StatesRemoteFull-time
Pay Range: $130k - $155k / annual
Posted Sep 1
Apply

Job Description

About the Role:

Pondurance is looking for a Senior Security Consultant, Continuity and Compliance to join our Compliance Consulting team. In this role, you will lead compliance-focused consulting engagements and serve as a trusted advisor to clients navigating complex cybersecurity, risk, and regulatory requirements.

You’ll work primarily independently while collaborating with other consultants and internal subject matter experts as needed. The ideal candidate brings strong experience with regulatory and security frameworks, including HIPAA, PCI DSS, NIST, and CMMC, and has experience applying these requirements across industries such as healthcare, manufacturing, financial services, education, technology, and retail.

Responsibilities:

  • Lead and execute multiple client consulting engagements concurrently, ensuring delivery aligns with established scope, timelines, budgets, and quality standards.
  • Lead annual PCI DSS compliance assessments, including SAQs, ROCs, and other applicable validation activities in accordance with PCI SSC requirements and QSA responsibilities.
  • Serve as a Subject Matter Expert (SME) for PCI DSS, NIST, HIPAA, and other applicable security and compliance frameworks, providing accurate, practical, and actionable client guidance.
  • Assess client security programs, technical controls, and regulatory requirements to identify risks, vulnerabilities, compliance gaps, and opportunities for improvement.
  • Develop practical remediation strategies and recommendations aligned with regulatory requirements, industry frameworks, risk, and client business needs.
  • Own assigned consulting engagements from initiation through completion, including the accuracy, quality, documentation, and final readiness of assessment deliverables.
  • Conduct client interviews, strategic advisory sessions, and workshops with executive leadership, technical teams, and key stakeholders to evaluate controls and communicate findings.
  • Establish, review, and advise on client policies, procedures, and controls to support compliance, security, and risk-management objectives.
  • Serve as a trusted security and compliance advisor, providing strategic guidance and applying professional judgment to complex, nuanced, or ambiguous client situations.
  • Provide technical direction, quality review, and mentorship to consultants and peers, promoting consistency, accuracy, and adherence to established assessment standards and methodologies.

Knowledge and Skills:

  • Bachelor’s degree and 5+ years of experience in information security compliance, auditing, and assessments; or 7+ years of demonstrated experience in a related information security discipline.
  • Active PCI DSS Qualified Security Assessor (QSA) certification, with a professional certification such as CISSP, CISA, CMMC, or an equivalent credential required.
  • Strong working knowledge of security and regulatory frameworks, including PCI DSS, NIST, HIPAA, and CMMC, with the ability to interpret requirements and apply them within client environments.
  • Strong technical foundation in core IT and security concepts, including networking, databases, operating systems, and security controls, with the ability to evaluate technical environments for risk and compliance.
  • Demonstrated critical-thinking, problem-solving, and advisory skills, including the ability to conduct root cause analysis, exercise sound professional judgment, and develop practical, actionable recommendations.
  • Strong consulting, communication, and engagement-management skills, with the ability to communicate effectively with technical teams, business stakeholders, and executive leaders while managing multiple priorities and client engagements.
  • Preferred: Experience establishing, developing, or maturing information security programs.

If you have other combinations of relevant skills and experience that you believe make you the right candidate for this role, please let us know.

Work Environment & Schedule:

This is a full-time, U.S.-based remote position open to candidates in all 50 states. Preference will be given to candidates who can consistently work Central or Eastern Time business hours, regardless of where they reside. Team members must be available during established business hours as needed for client collaboration, calls, meetings, and internal teamwork.

Although this is a remote role, if you live close by, you’ll have access to our office located in McLean, VA.

Who we are:

At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great!

Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R. Pelletier).

We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice, and we want you to use it.

Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.

What We Offer:

The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.

An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.

Compensation & Benefits

The anticipated base salary range for this position is $130,000 - $155,000 annually. Actual compensation will be determined in good faith based on factors such as relevant experience, technical expertise, certifications, geographic location (where applicable), and internal equity. This position may also be eligible for bonus or other incentive compensation, as well as the benefits described below.

Some of the corporate benefits for full-time employees include:

  • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan
  • Time off: PTO, sick, holiday, & parental leave details are available

To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.

We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.

This job posting describes the general nature and level of work expected for this position and is not intended to be an exhaustive list of all responsibilities, duties, qualifications, or working conditions. Responsibilities and requirements may change based on business needs and applicable law.

Originally posted on Himalayas

View job
W

Security Engineer - Product

Wiz Co

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 1
View job

Staff Engineer, Application Security

ACV Auctions

  • United States
  • Remote
  • Full-time
Apply
Sep 1
View job
R

AI Agent Security Architect

Replit

  • Foster City, CA
  • Remote / On-site
  • Full-time
Apply
Sep 1
View job

Senior Security Consultant, Continuity and Compliance

Pondurance

  • United States
  • Remote
  • Full-time
Apply
Sep 1
View job

Platform Security Engineer

Glean

  • United States
  • Remote
  • Full-time
Apply
Sep 1
View job

Senior Security Support Analyst

Coalition

  • Canada
  • Remote
  • Full-time
Apply
Sep 1
View job

GPSU Cybersecurity Spring Internship

GuidePoint Security LLC

  • United States
  • Remote
  • Internship
Apply
Sep 1
View job

Senior Security Solutions Engineer

Expel

  • United States
  • Remote
  • Full-time
Apply
Sep 1
View job

Senior Security Support Analyst

Coalition

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Cloud / Network / Cybersecurity Engineer

Pavago

  • Brazil
  • Remote
  • Full-time
Apply
Aug 31
View job

Data Privacy and Responsible AI Manager

Accuray

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Staff Cybersecurity Analyst [599]

D-Wave Systems

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Principal Identity Governance and Administration - US - Remote

Worldwide Clinical Trials

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Senior Product Manager, Digital Risk Protection Takedowns

Recorded Future

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job
A

Security Operations Engineer

American Fidelity

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Risk Analyst

Pavago

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Forensics / Incident Response SME

Valiant Solutions

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Presales Solutions Engineer - Endpoint Security

SHI International Corp.

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Manager, Information Security

Synack

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Security Engineer (Senior)

VirtusLab

  • Worldwide
  • Remote
  • Contract
Apply
Aug 31
View job

Cyber Security Engineer

Emprise Bank

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Principal Cloud Security Architect

Caesars Entertainment

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Principal Architect, Technology – Enterprise Security

Ziply Fiber

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Senior Cyber Threat Intelligence (CTI) Analyst

Live Nation Entertainment

  • United Kingdom
  • Remote
  • Full-time
Apply
Aug 31
View job

Senior Director - SaaS, Cloud & Product Security

PTC

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Senior Technical Program Manager, Privileged Access Management

Keeper Security, Inc.

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

AWS Security Manager

Peraton

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Managed Services Networking & Security Enterprise Services Architect

Myriad360

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Senior Manager, Product Security

Tines

  • United States
  • Remote
  • Full-time
Apply
Aug 31
View job

Security Solutions Engineer

Hypernative

  • United States
  • Remote
  • Full-time
Apply
Aug 31
PreviousPage 118 of 127Next
Pondurance

Senior Security Consultant, Continuity and Compliance

United StatesRemoteFull-time
Pay Range: $130k - $155k / annual
Posted Sep 1
Apply

Job Description

About the Role:

Pondurance is looking for a Senior Security Consultant, Continuity and Compliance to join our Compliance Consulting team. In this role, you will lead compliance-focused consulting engagements and serve as a trusted advisor to clients navigating complex cybersecurity, risk, and regulatory requirements.

You’ll work primarily independently while collaborating with other consultants and internal subject matter experts as needed. The ideal candidate brings strong experience with regulatory and security frameworks, including HIPAA, PCI DSS, NIST, and CMMC, and has experience applying these requirements across industries such as healthcare, manufacturing, financial services, education, technology, and retail.

Responsibilities:

  • Lead and execute multiple client consulting engagements concurrently, ensuring delivery aligns with established scope, timelines, budgets, and quality standards.
  • Lead annual PCI DSS compliance assessments, including SAQs, ROCs, and other applicable validation activities in accordance with PCI SSC requirements and QSA responsibilities.
  • Serve as a Subject Matter Expert (SME) for PCI DSS, NIST, HIPAA, and other applicable security and compliance frameworks, providing accurate, practical, and actionable client guidance.
  • Assess client security programs, technical controls, and regulatory requirements to identify risks, vulnerabilities, compliance gaps, and opportunities for improvement.
  • Develop practical remediation strategies and recommendations aligned with regulatory requirements, industry frameworks, risk, and client business needs.
  • Own assigned consulting engagements from initiation through completion, including the accuracy, quality, documentation, and final readiness of assessment deliverables.
  • Conduct client interviews, strategic advisory sessions, and workshops with executive leadership, technical teams, and key stakeholders to evaluate controls and communicate findings.
  • Establish, review, and advise on client policies, procedures, and controls to support compliance, security, and risk-management objectives.
  • Serve as a trusted security and compliance advisor, providing strategic guidance and applying professional judgment to complex, nuanced, or ambiguous client situations.
  • Provide technical direction, quality review, and mentorship to consultants and peers, promoting consistency, accuracy, and adherence to established assessment standards and methodologies.

Knowledge and Skills:

  • Bachelor’s degree and 5+ years of experience in information security compliance, auditing, and assessments; or 7+ years of demonstrated experience in a related information security discipline.
  • Active PCI DSS Qualified Security Assessor (QSA) certification, with a professional certification such as CISSP, CISA, CMMC, or an equivalent credential required.
  • Strong working knowledge of security and regulatory frameworks, including PCI DSS, NIST, HIPAA, and CMMC, with the ability to interpret requirements and apply them within client environments.
  • Strong technical foundation in core IT and security concepts, including networking, databases, operating systems, and security controls, with the ability to evaluate technical environments for risk and compliance.
  • Demonstrated critical-thinking, problem-solving, and advisory skills, including the ability to conduct root cause analysis, exercise sound professional judgment, and develop practical, actionable recommendations.
  • Strong consulting, communication, and engagement-management skills, with the ability to communicate effectively with technical teams, business stakeholders, and executive leaders while managing multiple priorities and client engagements.
  • Preferred: Experience establishing, developing, or maturing information security programs.

If you have other combinations of relevant skills and experience that you believe make you the right candidate for this role, please let us know.

Work Environment & Schedule:

This is a full-time, U.S.-based remote position open to candidates in all 50 states. Preference will be given to candidates who can consistently work Central or Eastern Time business hours, regardless of where they reside. Team members must be available during established business hours as needed for client collaboration, calls, meetings, and internal teamwork.

Although this is a remote role, if you live close by, you’ll have access to our office located in McLean, VA.

Who we are:

At Pondurance, we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great!

Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R. Pelletier).

We believe everyone has the freedom to be themselves, especially at work, and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up; you have a voice, and we want you to use it.

Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.

What We Offer:

The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.

An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.

Compensation & Benefits

The anticipated base salary range for this position is $130,000 - $155,000 annually. Actual compensation will be determined in good faith based on factors such as relevant experience, technical expertise, certifications, geographic location (where applicable), and internal equity. This position may also be eligible for bonus or other incentive compensation, as well as the benefits described below.

Some of the corporate benefits for full-time employees include:

  • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan
  • Time off: PTO, sick, holiday, & parental leave details are available

To promote a healthy and safe work community, we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.

We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex, including sexual orientation and gender identity, disability, or any other characteristic protected by law.

This job posting describes the general nature and level of work expected for this position and is not intended to be an exhaustive list of all responsibilities, duties, qualifications, or working conditions. Responsibilities and requirements may change based on business needs and applicable law.

Originally posted on Himalayas