[Remote] Senior Consultant, HITRUST Assessor

Note: The job is a remote job and is open to candidates in USA. CGVantage is a cybersecurity and compliance services firm. The Senior Consultant executes SOC and HITRUST certifications, leads complex engagements from planning through reporting and closure, and supports multi-framework assessments and development of junior engagement leads.

Responsibilities

• Develop engagement scope and testing plans, evaluate complex controls, and assess exceptions under applicable AICPA standards and firm methodology
• Assess client environments against AICPA Trust Services Criteria, NIST CSF, the ISO 27000 series, HITRUST CSF, PCI DSS, and HIPAA; tailor testing and conduct readiness assessments
• Review Associate and assigned Consultant workpapers for accuracy, sufficient evidence, and supported conclusions
• Manage day-to-day client relationships, lead status meetings, communicate findings, and resolve routine delivery issues
• Coordinate team assignments and review schedules, monitor budgets and deadlines, and provide regular written status reports and completion forecasts
• Prepare complete draft SOC and other attestation reports and resolve review comments through finalization
• Escalate significant technical issues, scope changes, and resource needs to management with recommendations
• Coach Associates and Consultants to lead engagements and support the transfer of suitable assignments
• Maintain technical knowledge and improve firm methodology, templates, and training

Skills

• Bachelor's degree in accounting, information systems, cybersecurity, or a related field, or equivalent relevant experience
• Typically 3–6 years of total relevant experience in IT audit, assurance, risk, or compliance
• Familiarity with multiple information security and compliance frameworks, such as ISO 27001, CIS Controls, NIST CSF, HIPAA, and HITRUST
• Experience leading more-complex SOC or other AICPA attestation engagements and independently applying an additional relevant framework in testing or readiness assessments
• Working knowledge of IT risks, control design and operating effectiveness, audit evidence, and testing methods
• Demonstrated ability to produce complete, review-ready files and draft reports with limited substantive comments, review staff work, and develop effective Lead Auditors
• Clear written and verbal communication, sound judgment, attention to detail, and ability to manage competing deadlines
• Proficiency with Microsoft Office and the ability to learn audit and GRC systems; commitment to confidentiality and client service
• CISA and/or an active CPA license; CISM, CISSP, ISO 27001 Lead Auditor, or HITRUST credentials are also valued
• Experience with a Big 4 firm or a national CPA firm
• Client-service experience in public accounting, advisory, consulting, or professional services
• Experience assessing cloud and SaaS environments and modern security controls, including access management, change management, CI/CD, and logging and monitoring
• Experience with SOX IT controls or CIS benchmarks

Benefits

• Remote work (United States or Canada).

Company Overview