Role Description We are seeking a seasoned Cybersecurity & Governance Consultant to support an enterprise technology strategy initiative. This role will focus on: - Assessing enterprise cybersecurity posture and governance practices. - Evaluating cybersecurity policies, standards, and operational risks. - Developing AI governance frameworks and recommendations. - Conducting data governance and information management assessments. - Supporting business impact assessments and risk prioritization activities. - Developing governance documentation and implementation recommendations. - Aligning recommendations with industry best practices and regulatory standards. - Collaborating with executive leadership and technical stakeholders. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or a related field. - 10+ years of cybersecurity, governance, or risk management experience. - Experience developing cybersecurity governance frameworks. - Strong knowledge of cybersecurity standards and best practices. - Experience with data governance and enterprise risk management. - Excellent analytical and communication skills. Requirements - CISSP, CISM, CGEIT, CRISC, or similar certification (preferred). - Experience with AI governance frameworks (preferred). - Government or public sector consulting experience (preferred). - Experience supporting enterprise technology strategy initiatives (preferred). Company Description As one of the Washington Metropolitan-area’s fastest growing IT companies, we are always looking for creative, passionate and responsible employees. We acknowledge that intelligent, dedicated employees are our greatest asset and are continuously adding to our talented and diverse team. If you feel innovation, integrity and a drive to deliver are key components to success, we invite you to become Enlightened.

Role Description Estamos buscando un/a GRC Cybersecurity Consultant para incorporarse a un proyecto internacional de gran envergadura, trabajando 100% en remoto con un cliente de referencia. Buscamos un perfil con experiencia consolidada en Gobierno, Riesgo y Cumplimiento (GRC) dentro del ámbito de la ciberseguridad, con sólidos conocimientos en sistemas de gestión de seguridad de la información y marcos normativos. Qualifications - Experiencia mínima demostrable de 3 años en posiciones de GRC Cybersecurity. - Experiencia sólida implantando, manteniendo o auditando ISO 27001. - Nivel de inglés C1 o superior (trabajo diario en entorno internacional). - Capacidad para trabajar de forma autónoma en equipos distribuidos. Requirements - Se valorará muy positivamente experiencia con el estándar TISAX. - Conocimientos de otros marcos y estándares de seguridad y cumplimiento (NIST, ISO 27002, SOC 2, etc.). - Certificaciones relacionadas con seguridad de la información o GRC (ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CRISC, etc.). Benefits - Proyecto internacional de larga duración. - Modalidad 100% remoto desde España. - Entorno tecnológico y multicultural. - Oportunidades de desarrollo profesional y formación continua. - Incorporación a un equipo especializado en ciberseguridad y GRC.

• Working cross functionally to design, build, and operate solutions that continuously improve and automate our security capabilities • Leveraging data to understand trends, metrics, and opportunities to improve our security posture and then helping execute on those opportunities with stakeholders • Leading and enhancing incident response efforts, spearheading analysis, containment, and mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security incidents • Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures • Mentoring and coaching more junior engineers or analysts

• Advising national clients on information security (VdS 10000, ISO/IEC 27001, BSI IT-Grundschutz, CISIS12) • Implementing information security management systems (ISMS) at client sites • Developing policies, work instructions, and decision papers • Planning, coordinating, and delivering training and awareness programs • Designing, managing, and executing the full information security process