Senior Consultant, HITRUST Assessor

Location : United States or Canada (remote) CGVantage is a fast-growing cybersecurity and compliance services firm trusted by organizations that demand deep technical expertise, rigorous methodologies, and measurable outcomes. We help clients reduce risk, strengthen their security posture, and navigate complex compliance requirements across frameworks including SOC, ISO, PCI, and HITRUST. The Senior Consultant's primary responsibility is executing SOC 1, SOC 2, SOC 3, and HITRUST certifications. You will serve as Lead Auditor for more-complex engagements from planning through reporting and closure with limited direction. Supporting responsibilities include multi-framework assessments and development of junior engagement leads. SUPERVISORY RESPONSIBILITY This position has no formal direct reports. Provides engagement-level guidance as assigned. CORE RESPONSIBILITIES Develop engagement scope and testing plans, evaluate complex controls, and assess exceptions under applicable AICPA standards and firm methodology. Assess client environments against AICPA Trust Services Criteria, NIST CSF, the ISO 27000 series, HITRUST CSF, PCI DSS, and HIPAA; tailor testing and conduct readiness assessments. Review Associate and assigned Consultant workpapers for accuracy, sufficient evidence, and supported conclusions. Manage day-to-day client relationships, lead status meetings, communicate findings, and resolve routine delivery issues. Coordinate team assignments and review schedules, monitor budgets and deadlines, and provide regular written status reports and completion forecasts. Prepare complete draft SOC and other attestation reports and resolve review comments through finalization. Escalate significant technical issues, scope changes, and resource needs to management with recommendations. Coach Associates and Consultants to lead engagements and support the transfer of suitable assignments. Maintain technical knowledge and improve firm methodology, templates, and training. OTHER DUTIES Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice, as allowed by law. Occasional evening or weekend work may be required. WHAT YOU BRING Required Bachelor's degree in accounting, information systems, cybersecurity, or a related field, or equivalent relevant experience. Typically 3–6 years of total relevant experience in IT audit, assurance, risk, or compliance. Familiarity with multiple information security and compliance frameworks, such as ISO 27001, CIS Controls, NIST CSF, HIPAA, and HITRUST. Experience leading more-complex SOC or other AICPA attestation engagements and independently applying an additional relevant framework in testing or readiness assessments. Working knowledge of IT risks, control design and operating effectiveness, audit evidence, and testing methods. Demonstrated ability to produce complete, review-ready files and draft reports with limited substantive comments, review staff work, and develop effective Lead Auditors. Clear written and verbal communication, sound judgment, attention to detail, and ability to manage competing deadlines. Proficiency with Microsoft Office and the ability to learn audit and GRC systems; commitment to confidentiality and client service. Preferred CISA and/or an active CPA license; CISM, CISSP, ISO 27001 Lead Auditor, or HITRUST credentials are also valued. Experience with a Big 4 firm or a national CPA firm. Client-service experience in public accounting, advisory, consulting, or professional services. Experience assessing cloud and SaaS environments and modern security controls, including access management, change management, CI/CD, and logging and monitoring. Experience with SOX IT controls or CIS benchmarks. PHYSICAL REQUIREMENTS This job operates in a professional virtual remote work environment. While performing the essential functions of this job, the employee is required to stand and sit for prolonged periods. Specific vision abilities required include close and medium distance vision and the ability to adjust focus. Must be able to hear normal sounds, distinguish sound as voice and communicate through human speech. This position requires the ability to routinely operate a keyboard, computer mouse, telephone, scanner, writing tools, scissors, and other standard office equipment. On occasion, an employee will be asked to lift items weighing up to 25 lbs. TRAVEL Local and overnight travel of approximately 15% is expected for this position.