StrataNorth is a young Boston-based IT advisory consultancy with a passion for providing the best outcomes for our customers. We help businesses of all sizes, from startups to large enterprises, who understand that having the right strategy, technological footprint, secured environments, and a focus on customer-centricity is directly tied to their ability to stabilize, scale, and sustain their growth. Our consultants utilize a comprehensive, in-depth and analytical approach to deliver successful outcomes that help our customers make smarter business decisions. We deliver exceptional world-class service with solutions tailored to our customer’s business. We are committed to being solution agnostic, thereby allowing us to consider a wide range of solutions to provide outcomes that truly meet our customer’s business needs.

Vision Statement

“Create innovative solutions that empower every organization to deliver on their promises.”

Mission Statement 

“To deliver strategic advisory services of unmatched quality by continuously being inspired by change, doing all that we do with integrity, and driving excellence in our execution.”

We are looking for an information security specialist who is a creative problem-solver with a passion for helping organizations mature their Information, risk, and IT security programs. The Senior Information Security Consultant will be responsible for recommending various security solutions to solve business problems, creating project plans for analysis, running workshops, overseeing third-party partner implementations, creating policies, establishing risk programs, and performing assessments of security solutions.

Our Information Security Consultants conduct in-depth business risk analyses, identify technical requirements and industry trends, and establish best practices. The Consultant will be customer-facing, lead project engagements, and provide advisory and guidance to the customer at the executive level. This role will require communicating complex security concepts and their direct business value to customers. The ideal candidate will produce high-quality deliverables relying on their exceptional interpersonal and communication skills.

Role Benefits

• Work where and how you want with flexible hours
• Programs for skill enhancement and career growth for your portfolio
• The ability to provide your experience and skills to drive the overall company growth and success
• Be a part of an exciting young IT Advisory startup
• Potential for full-time and benefits

General consulting

• Understand customer business needs, determine requirements, provide consultative guidance, and drive the analysis required to solve their business challenges.
• Understand organizational practices, technology trends, and industry best practices.
• Analyze the people, process, and technology as it aligns with organizational change management for the business.
• Serve as the key trusted security advisor to the customer.
• Engage with customers to define the project scope, create plans, timelines, and roadmaps.
• Provide project management and drive projects to completion.

Information Security and IT Security

• Establish official risk management programs for customers working across IT teams and executive leadership to drive compliance and adoption
• Create information security policies, procedures, and policy documentation for various compliance frameworks
• Conduct formal information security assessments and deliver reports with findings and recommendations VIA GAP Analysis
• Advise customers on information security best practices and communicate the business value
• Conduct vendor information security risk assessments and reviews
• Ability to perform Business Impact Analysis (BIA), conduct stakeholder interviews, and create meaningful roadmaps for remediation
• Ability to perform business continuity and disaster recovery assessments (BCDR) and help customers implement programs
• Perform information security audits, and identify information security risks, exposures, and safeguards. Document risks, create recommendations, and develop countermeasures.
• Advise customers on which security compliance they need to meet in their industry.
• Develop and maintain information security awareness programs for customers, including training programs

Education

• 5-7+ years of consultative experience in security analysis
• 3+ of Information security program management and compliance
• S. degree (or relevant experience above) in relevant technology or business discipline
• Preferred Certifications: CISSP, CISM, CISA, Security +
• 3+ years as a security analyst at a senior level

Technical Knowledge

• Working experience and understanding of compliance frameworks such as CCPA, CMMCv2, FedRAMP, GDPR, HIPAA, HITRUST, ISO, NIST, PCI DSS, SAS70, SOC, SOX
• Expert in identifying sensitive Information such as PI (all categories), HIPAA, GDPR, Financial data, etc.
• Familiarity with technical concepts such as DLP, IAM, White/Black hat, Pen testing, vulnerability management

Professional Acumen

• Superb written and oral communication skills
• Excellent interpersonal skills with a focus on customer excellence
• Creative problem-solving skills
• Analytical mindset and technical proficiency
• Good time management and organizational skills
• Expert level in Microsoft Office applications, including Project and Excel
• Superior presentation skills at the executive level
• A passion for excellence in every aspect of the role

This role is 100% fully remote with flexible hours. This role may flex between part-time and full-time depending on customer needs. Commitments will be communicated in advance.

Hourly rate starts at $100 / hr. (pending experience).

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee, contractor, or freelancer for this role. Duties, responsibilities, and activities will be reviewed periodically as duties and responsibilities change with business necessities. Essential and marginal job functions are subject to modification.