RISCPoint Advisory Group Consulting Manager - SOC 2 & ISO 27001 Services Remote · Full time

Apply for Consulting Manager - SOC 2 & ISO 27001 Services

RISCPoint was founded with the vision to seamlessly integrate with your team, utilizing only high-performing professionals with deep technical and operational experience to fulfill your security and compliance needs. Our diverse team has served companies ranging from Fortune 10 to pre-series A start-ups. Our first priority is to understand your specific needs, only recommending services we are certain will deliver a meaningful return on investment. We provide business-focused risk, technology and cybersecurity solutions, specifically tailored to your organization.

Key Responsibilities

Engagement Leadership

·        Lead multiple SOC 2 and ISO/IEC 27001 consulting and advisory engagements simultaneously.

·        Serve as the primary point of contact for clients, managing communications, expectations, and overall engagement success.

·        Develop tailored compliance roadmaps aligned with client business objectives and regulatory requirements.

 

Technical & Advisory Expertise

·        Provide subject matter expertise on SOC 2 Trust Services Criteria, ISO/IEC 27001 requirements, and related security frameworks (e.g., NIST CSF, HITRUST, HIPAA).

·        Guide clients in the design, implementation, and optimization of information security compliance frameworks such as ISO 27001 and SOC 2.

·        Perform gap assessments, risk analyses, and readiness reviews to prepare clients for audits and certifications.

·        Perform SOC 1, and SOC 2 audits.

Project & People Management

·        Oversee day-to-day project delivery, ensuring timelines, budgets, and quality standards are met.

·        Mentor and coach junior consultants, providing guidance on methodologies, client management, and professional growth.

·        Contribute to the development of methodologies, templates, and best practices for consistency and efficiency across engagements.

 

Business Development & Growth

·        Partner with leadership and sales teams to scope new opportunities, develop proposals, and support client presentations.

·        Identify opportunities to expand relationships and cross-sell additional advisory services.

·        Represent the firm in industry events, webinars, and thought leadership initiatives.

Qualifications

Education & Credentials

·        Bachelor’s degree in Information Security, Information Technology, Business, or related field (Master’s preferred).

·        Relevant certifications strongly preferred (e.g., CISA, CISM, CISSP, ISO 27001 Lead Implementer/Auditor).

 

Experience

·        6–10 years of experience in cybersecurity, IT risk, or compliance consulting, with at least 3 years in a client-facing consulting manager or engagement lead role.

·        Proven expertise in SOC 2 and ISO/IEC 27001 frameworks, including readiness, remediation, and certification support.

·        Experience working with CPA firms, auditors, or registrars is a plus.

 

Skills

·        Strong understanding of information security governance, risk management, and compliance practices.

·        Excellent communication and presentation skills, with the ability to engage both executive and technical audiences.

·        Demonstrated leadership, project management, and team mentorship capabilities.

COMPENSATION & BENEFITS

·        Base Salary + Bonus

·        Company Paid Health Insurance

·        Company Paid Dental Insurance

·        Company Paid Vision Insurance

·        401k with 3% Company Contribution (Traditional & Roth Options)

·        Generous Vacation Policy