Sr. Consultant | GRC/AI/Privacy (Remote)
Trace3 · Dallas, TX
About the role
A senior client-facing consultant in Trace3's security practice who leads governance, risk, compliance, privacy and AI governance engagements and advises CIOs, CISOs and risk and privacy leaders. The consultant assesses current security programs, sets target states and roadmaps, applies frameworks from NIST CSF, RMF and 800-53 to ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR and CMMC, builds control environments, policies and governance models, and oversees reports, gap analyses and risk registers. Advising on AI risk and regulation such as the EU AI Act, shaping Trace3's GRC services, supporting proposals and statements of work, and speaking at events are also part of it.
Trace3 wants ten to fifteen years in security consulting and enterprise security, and ideally CISSP, CISA, CISM or CIPP. Remote, with some travel.