Senior Security Advisor - GRC

Role Summary

Established in 2014 and based in Charleston, South Carolina, Soteria 's expertise in the cybersecurity domain is predicated upon the accumulated practical experience across all team members. Soteria 's security professionals have held leading positions in private industries, state governments, and federal intelligence communities.

Driven by this combined pool of knowledge as well as the belief that “Security is for Everyone,” Soteria offers advisory services and solutions which are significantly differentiated from the security status quo. Soteria treats each client as a unique case deserving of individualized security insights and specialized hands-on assistance.

As a Senior Security Advisor at Soteria , you will bring seasoned GRC expertise to a fast-paced team serving a growing roster of clients navigating today's threat landscape. This role calls for authenticity, engagement, curiosity, and care reflected in every client interaction. Exercising sound judgment with minimal direction, you will lead complex risk and compliance engagements, guiding clients toward stronger security postures, delivering polished, timely, well-documented findings.

Success here requires deep technical grounding, paired with strong judgment, operating with minimal oversight, and client relationship management skills. You will lead multiple engagements at once, mentor junior advisors, adapt quickly, maintain the highest quality under tight deadlines.

Hours of Operation

Soteria is a remote workforce with flexibility in scheduling. The majority of work time will be 9:00 AM EST to 5:00 PM EST.

This is a remote position; however, occasional travel may be required for client engagements, team meetings, or other business needs.

Responsibilities

• Communicate with prospective and existing clients to understand their security needs and develop engagement plans to satisfy their requirements.
• Develop an understanding of the business requirements and other motivating factors for clients.
• Lead and perform security assessments to help organizations understand where gaps exist within their security programs.
• Lead development of System Security Plans (SSPs) end to end, including control selection, implementation statements, system categorization, stakeholder coordination through approval.
• Identify cybersecurity-related regulatory requirements (e.g., PCI-DSS, HIPAA, CCPA, GDPR, NYDFS) as well as gaps in compliance, and develop strategic plans to achieve and maintain compliance.
• Develop and review policies, procedures, and other related documentation to establish a documented security program.
• Work closely with Customers and the Soteria team to develop plans of action for clients to ensure they achieve their desired outcomes.
• Document and present findings and recommendations to clients, including C-Suite and board-level executives, in a professional manner.
• Maintain relationships with clients post-assessment in order to assist and advise as they continue to build and improve their security.
• Maintain competence in security trends, technologies, and practices through self-study and attendance of industry events.
• Train and mentor other employees in order to build the company's overall capacity and capability.
• Work with Soteria leadership to develop, achieve, and enhance the revenue goals.
• Provide Soteria Finance the data, reports, and project updates as required by clients, Soteria leadership, and business associates.
• Effectively manage all Advisory projects, ensuring professional and proactive client communication is maintained by all Advisors and that client expectations are always met
• Perform business development tasks from the initial call with a referral or repeat client, through the proposal stage, and finally, to contract execution.

Requirements

• 10+ years of industry experience with a deep understanding of the cybersecurity space
• Prior experience in a cybersecurity consulting role
• Prior experience in a cybersecurity leadership role
• Prior experience authoring System Security Plans, supporting RMF or ATO-style processes.
• Knowledge and understanding of common regulatory and compliance requirements such as HIPAA, PCI-DSS, CMMC, GDPR, etc.
• Relevant certifications such as CISSP, CISM, CISA, CEH, etc.