Cybersecurity & Compliance Advisor

Position Summary: 

We are seeking a Cybersecurity & Compliance Advisor to strengthen cybersecurity governance, risk management, and compliance capabilities across business functions and digital solutions. The role will serve as a trusted advisor to business stakeholders, technology teams, and leadership by ensuring cybersecurity requirements, regulatory obligations, and corporate policies are effectively integrated into business operations and digital programs.

The Cybersecurity & Compliance Advisor will assess security risks, define mitigation strategies, support compliance initiatives, and guide teams through security assurance activities across cloud, enterprise, and operational technology environments. The position requires strong expertise in cybersecurity frameworks, security controls, risk management, and regulatory compliance, combined with the ability to translate technical requirements into practical business solutions.

This is a highly collaborative role requiring effective stakeholder engagement, governance leadership, and the ability to drive security awareness and compliance maturity across global and cross-functional teams.

A Snapshot of your Day 

A typical day involves collaborating with project teams, solution architects, IT leaders, and business stakeholders to evaluate cybersecurity risks and compliance requirements for ongoing initiatives. You review security assessments, advise on remediation activities, and ensure controls align with enterprise standards and regulatory obligations.

You may participate in governance reviews, support audits, assess cloud and application security designs, and provide recommendations that enable secure business operations while balancing productivity, innovation, and risk management objectives.

How You’ll Make an Impact (responsibilities of role)

Strategic 

• Develop and promote cybersecurity governance frameworks, policies, standards, and controls that align with business objectives and regulatory requirements.

• Advise business and technology leaders on cybersecurity risks, compliance obligations, and security-by-design principles during digital transformation initiatives.

• Drive cybersecurity risk management programs by identifying emerging threats, assessing business impact, and recommending pragmatic mitigation strategies.

• Support the development and execution of compliance roadmaps to improve organizational security maturity and regulatory readiness.

• Partner with stakeholders to establish security requirements for enterprise applications, cloud services, operational systems, and third-party solutions.

• Monitor cybersecurity trends, industry standards, and evolving regulations, ensuring the organization remains aligned with best practices and compliance expectations.

• Promote security awareness and foster a culture of accountability for cybersecurity and data protection throughout the organization.

Operational 

• Conduct security risk assessments, control reviews, and compliance evaluations across applications, infrastructure, cloud environments, and operational processes.

• Support internal and external audits by coordinating evidence collection, control validation, remediation tracking, and compliance reporting.

• Review solution architectures, project designs, and implementation plan to identify security gaps and recommend appropriate controls.

• Perform vendor and third-party security assessments to evaluate cybersecurity posture and contractual compliance requirements.

• Collaborate with technical teams to implement security controls related to identity management, data protection, network security, monitoring, and incident response.

• Track cybersecurity findings, vulnerabilities, and compliance deviations while driving corrective and preventive actions.

• Support incident investigations, root cause analysis, and lessons learned activities from a governance and compliance perspective.

• Maintain cybersecurity documentation, risk registers, policy records, and compliance artifacts to support governance and auditability.

What You Bring (required qualification and skill sets)

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline.

• Minimum 5+ years of experience in cybersecurity, information security governance, compliance, risk management, or related advisory roles.

• Strong knowledge of cybersecurity frameworks and industry standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, IEC 62443, or equivalent.

• Experience supporting compliance programs related to data privacy, information security, cloud security, and regulatory requirements.

• Proven ability to conduct security risk assessments, define mitigation plans, and communicate risk decisions to technical and non-technical stakeholders.

• Experience working with enterprise security controls including identity and access management, data protection, security monitoring, vulnerability management, and incident response.

• Strong understanding of cloud security principles across Azure, AWS, or hybrid environments.

• Experience collaborating with global cross-functional teams and managing multiple stakeholders simultaneously.

• Excellent communication, presentation, documentation, and stakeholder management skills.

• Ability to balance security requirements with operational and business objectives while driving practical outcomes.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CCSP, or equivalent.

• Experience supporting cybersecurity requirements within industrial, energy, engineering, manufacturing, or critical infrastructure environments.

• Knowledge of Operational Technology (OT) security and industrial cybersecurity controls.

• Familiarity with data privacy regulations and compliance frameworks such as GDPR and related international standards.

• Experience with security governance platforms, GRC solutions, and audit management tools.

• Exposure to DevSecOps practices and secure software development lifecycle methodologies.

• Experience leading cybersecurity awareness initiatives, compliance assessments, or regulatory audits at enterprise scale.

Tech Stack

• Governance, Risk & Compliance (GRC): ServiceNow GRC, RSA Archer, MetricStream, or similar platforms for risk management, control monitoring, and audit readiness.

• Cloud Security: Microsoft Azure Security Center, Microsoft Defender, AWS Security Services, and cloud governance solutions to manage security posture and compliance.

• Identity & Access Management: Microsoft Entra ID (Azure AD), Privileged Access Management, RBAC, and multi-factor authentication technologies.

• Security Monitoring & Threat Detection: SIEM and security analytics platforms such as Microsoft Sentinel, Splunk, QRadar, or equivalent solutions.

• Vulnerability & Risk Management: Tenable, Qualys, Rapid7, or similar solutions for vulnerability assessment, remediation tracking, and risk reporting.

• Compliance & Audit Management: Policy management, evidence collection, control testing, and regulatory reporting tools supporting governance activities.

• Collaboration & Reporting: Microsoft 365, Teams, SharePoint, Power BI, and ServiceNow for stakeholder engagement, reporting, and governance workflows.

• Methodologies & Frameworks: ISO 27001, NIST CSF, CIS Controls, IEC 62443, Risk Management Frameworks, and Security-by-Design principles.