HireMO

Why WWT?

World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.

Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)-a collaborative ecosystem featuring state-of-the-art hardware and software-WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distributions capabilities.

With more than 14,000 team members and over 60 locations globally, WWT's culture-grounded in core values and leadership philosophies-has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.

Want to work with highly motivated individuals on high-performance teams? Join WWT today!

What is the Solutions Consulting & Engineering (SC&E) Team and why join?

Solutions Consulting & Engineering is an organization that is Customer Focused and Solutions Led. We deliver end-to-end and emerging solutions to drive customer satisfaction, increase profitability and growth. Our success is enabled by our world-class management consulting, delivery excellence and engineering brilliance. Our goal is to bring together business acumen with full-stack technical know-how to develop innovative solutions for our clients' most complex challenges.

Position Overview:

The Cyber Risk and Strategy Consultant is an individual contributor who executes assigned delivery tasks within WWT's Governance, Risk, Strategy and Compliance practice. Positioned below the Senior Consultant, the Consultant builds practical knowledge across GRC domains, contributes to high quality client deliverables under the guidance of experienced team members, and develops the core consulting skills needed to grow within the practice.

The Consultant is a core contributor to GRC delivery, supporting risk assessments and compliance gap analyses, gathering and organizing evidence, reviewing policies and controls, and producing the documentation and analysis that inform client recommendations. They work under the direction of a Senior Consultant, Lead Consultant, or Senior Manager, and are expected to grow steadily toward greater independence and ownership of defined workstream components.

Essential Functions:

Engagement Delivery

+ Execute assigned delivery tasks within GRC engagements under the direction of a Senior or Lead Consultant, with accountability for quality, accuracy, and timely completion

+ Support GRC assessments: assist with current state discovery, gather and organize documentation and evidence, review control environments, document findings, and support maturity scoring against defined frameworks

+ Perform core GRC work with guidance: populate and maintain risk registers, map controls and identify gaps against frameworks, support policy review and drafting, assist with compliance readiness assessments, and help evaluate third party risk

+ Draft sections of client deliverables (assessment findings, risk registers, control gap registers, maturity scorecards, and executive summary inputs) for Senior and Lead Consultant review, meeting WWT's professional services quality standards

+ Participate in discovery sessions, stakeholder interviews, and workshops; capture detailed notes, track action items, and organize findings into structured outputs for team review

+ Support strategy and program design activities: research regulatory and framework requirements, document current state compliance posture, and contribute analysis to future state program recommendations developed by senior team members

Client Engagement

+ Build effective working relationships with client team members and project stakeholders; establish a reputation for responsiveness, reliability, and accuracy

+ Communicate status, findings, and open questions clearly and accurately to client counterparts; begin developing the ability to walk through findings in client working sessions

+ Support client status reporting, meeting coordination, documentation, and action item tracking under the direction of the engagement lead

Pursuit & Practice Support

+ Support pursuit activities as assigned: research client environments and regulatory requirements, and contribute draft content to proposals and SOWs

+ Contribute to practice development by helping build and maintain reusable delivery assets, assessment templates, control libraries, and knowledge base content

+ Develop commercial awareness: learn how engagements are scoped, staffed, and delivered, including utilization expectations and how delivery quality connects to client satisfaction

Growth & Development

+ Actively build foundational knowledge across GRC domains and regulatory frameworks through project work, training, certifications, and independent learning

+ Seek and apply feedback from Senior Consultants, Lead Consultants, and Senior Managers; demonstrate consistent growth in delivery quality, independence, and communication skills

+ Learn and consistently apply WWT delivery methodologies, tools, and quality standards

Qualifications:

Required

+ 2 to 4 years of experience in cybersecurity, IT risk, IT audit, or compliance, with practical exposure to at least one GRC domain (risk management, compliance program management, policy governance, or third party risk)

+ Experience supporting GRC work in one or more of the following areas:

+ Risk Management: IT risk assessment support, risk register maintenance, qualitative risk scoring, and risk treatment tracking

+ Compliance Program Management: gap assessment support, controls mapping, audit readiness activities, evidence collection, and remediation tracking against frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, or SOX ITGC

+ Policy & Control Governance: policy review and update cycles, mapping controls to frameworks (NIST, CIS, ISO), control testing support, and policy exception tracking

+ Third Party & Vendor Risk: vendor assessment questionnaire administration, review of vendor responses and evidence, risk tiering support, and remediation tracking

+ GRC Platforms: ServiceNow GRC, Archer, OneTrust, Vanta, Drata, or equivalent, as an end user or administrator maintaining records, running assessments, or building reports

+ Foundational knowledge of common GRC and security frameworks, such as NIST CSF 2.0, NIST SP 800-53, ISO 27001/27002, CIS Controls v8, SOC 2 Trust S...

Apply Externally

Jobs

Security Solutions Consultant - Cyber Risk and Strategy

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Security Solutions Consultant - Cyber Risk and Strategy

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints