Intaso is hiring: Cybersecurity Risk Lead in Philadelphia

Cybersecurity Risk Lead

Please read before applying.

Intaso is running an exclusive search for a growing cybersecurity risk practice based in North America. In this role, you will drive cybersecurity transformation projects for their clients. This role is integral to enhancing organizational security postures through the development and implementation of robust cybersecurity strategies. The ideal candidate will bring expertise in compliance frameworks such as ISO27001, SOC2, HITRUST, HIPAA, GDPR, and NIST, paired with the ability to perform security assessments and recommend practical enhancements.

Role Highlights (Please Read):

• Compensation: $135,000 to $160,000, plus options/equity and comprehensive benefits.
• Location: 100% remote, with a preference for candidates based in the Northeastern part of the United States. Although customer facing, this role does not require you to travel to any client locations.
• Opportunity: High-Growth. This opportunity comes with a growth track to be their Information Security Officer for the North American region.
• Culture: Collaborative, healthy environment.
• Fluid Interview Process: Internal TA>ISO>Delivery Lead>CISO

About the Role: In this key position, you’ll:

• Lead Cybersecurity Initiatives: Manage and execute cybersecurity transformation projects aligned with standards like ISO27001, SOC2, HITRUST, HIPAA, GDPR, and NIST.
• Implement Strategies: Develop and roll out comprehensive cybersecurity strategies to bolster security controls and improve resilience.
• Client Advisory: Provide expert guidance to clients on security control enhancements and transformation initiatives.
• Assess and Enhance Maturity: Conduct cybersecurity maturity assessments and recommend improvements to existing security controls.
• Drive Compliance: Ensure alignment with regulatory and compliance requirements while maintaining a pragmatic approach to security transformation.

What You’ll Bring:

• Proven experience in leading cybersecurity projects within frameworks such as ISO27001, SOC2, HITRUST, HIPAA, GDPR, and NIST.
• Strong ability to assess and improve security controls, conduct gap analyses, and provide actionable recommendations.
• Experience deploying GRC SaaS solutions such as Vanta, OneTrust, Metricstream, Hyperproof, Archer, Auditboard, etc.
• Excellent communication and advisory skills to effectively engage with clients at all levels.
• Relevant Certifications: CTPRP, CISA, CISSP, etc.