Key Responsibilities
1 For all levels:
• Lead end-to-end cybersecurity maturity assessments using frameworks and standards such as NIST CSF, NIST 800-53, ISO/IEC 27001, ISA 62443, or CIS controls measured against DORA, NIS2, CRA, PCI-DSS and new revisions to regulations and directives Act as a trusted advisor to senior stakeholders on topics such as cloud security, zero trust, threat management, incident preparedness, and regulatory compliance.
• Evaluate risks associated with third-parties and criticality of provisioned services in the context of cybersecurity.
• Conduct detailed interviews, workshops, and document reviews to evaluate cybersecurity practices
• Develop clear, data-driven insights and recommendations tailored to client risk appetites and business goals
• Create strategic roadmaps to improve cybersecurity maturity, compliance, and governance
• Collaborate with client leadership teams to embed cyber risk considerations into decision-making
• Support business development efforts, including proposal writing and client presentations
• Mentor consultants and contribute to internal methodology development
Skills & Experience
• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related discipline.
• Minimum 3+ years (5+ for manager) years of experience in cybersecurity consulting, enterprise security, or risk management leadership.
• Strong understanding of key cybersecurity domains, including:
o Governance, Risk & Compliance (GRC)
o Cloud security and zero trust architectures
o Identity and Access Management (IAM)
o Data protection and privacy
o Threat management and incident response
• Familiarity with frameworks and standards such as NIST, ISO/IEC 27001, ISA 62443, CIS Controls, MITRE ATT&CK, and PCI-DSS.
• Strong knowledge of regulatory frameworks including NIS2, DORA, CRA, and GDPR.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementor/Auditor.
• Experience performing assessments across multiple industries such as finance, healthcare, telecommunications or energy
Desired Skills
• Experience delivering large-scale transformation programs or regulatory-driven security initiatives.
• Exposure to security operations, SOC optimisation, or incident response.
• Ability to translate complex technical risks into clear, actionable insights for senior and executive audiences.
• Experience with GRC platforms such as Archer, OneTrust, or ServiceNow.
• Strong presentation and influencing skills, with the ability to build long-term client relationships.
Life at GT
Reward and benefits:
Our reward and benefits are designed to create an environment where our people can flourish. We are committed to building a culture where our people have access to the necessary benefits to help promote a healthy lifestyle and thrive.
Equity, Diversity and Inclusion:
At Grant Thornton, we provide equitable opportunities for all our colleagues. We are a responsible, sustainable business where equity, diversity and inclusion (ED&I) is at the forefront of our workplace culture agenda, and today, we continue to build and develop on our existing ED&I structure and strategy to meet our workplace culture needs. People are at the heart of our business and teams built with varied backgrounds, racial differences, cultures, sexual orientations, religious orientations, ages, gender identities, abilities and family types present diverse viewpoints, which need to be heard and valued.
We are all at our best when we are able to be ourselves and we view integrity and authenticity as integral values to bring to our day-to-day work-life at the firm. We are excited to see the personality and perspectives you will bring to our team because we know we will all benefit from them. Diversity of thought, background and experience enables better decision-making, improves the quality of our delivery, and helps us to meet the needs of our clients. Our firm is built on people and their ideas, so we want to hear all the new perspectives and fresh thinking you have to offer. You form the bedrock of our firm’s best-practice principles and we will champion you as leaders from day one.
Recognition:
We want to create a culture of recognition and celebrating success, by saying thank you to people who surpass our expectations and recognising the right values and behaviours. Our Shout Out recognition scheme is our way of highlighting and promoting achievements. Whether you simply want to say thank you, celebrate a special occasion or give an award for doing something exceptional, you can do all of this and more through the scheme.
Forget what you think you know about professional services. We go beyond what’s expected and help others do the same.
Grant Thornton is the brand name for Grant Thornton LLP and Grant Thornton Advisors LLC the U.S. member firms of Grant Thornton International Ltd, one of the world’s leading independent audit & assurance, tax and advisory firms. That means our network has more than 73,000 professionals in more than 146 countries who are ready to help public and private organizations of all sizes take on today’s challenges. But what sets us apart isn’t just what we do – it’s how we do it. Here, we believe in making business more personal and building trust into every result. We’re collaborators – obsessed with quality and ready for anything – who understand the value of strong relationships. It’s how we challenge the expectations of business and empower our people and clients to do it, too.
One thing we won’t do? Grant Thornton will never request money or any form of payment for services via social media. Please report any concerns at 1-800-810-3503.
Grant Thornton International Limited (GTIL) and the member firms, including Grant Thornton LLP and Grant Thornton Advisors LLC, are not a worldwide partnership. Services are delivered by the member firms. GTIL and its member firms are not agents of, and do not obligate, one another and are not liable for one another’s acts or omissions. Please see www.grantthornton.com for further details.
