Lead GRC and data privacy engagements, design security governance models, support regulatory compliance, and manage client communications. Mentor teams and contribute to practice development.
CFGI is seeking a Cybersecurity GRC & Data Privacy Subject Matter Expert to lead and deliver strategic advisory engagements that strengthen clients’ security governance, risk management, compliance posture, and privacy programs. This role blends hands-on delivery, executive communication, and practice leadership. You will work directly with CISOs, CIOs, CFOs, General Counsel/Privacy Counsel, Risk Leaders, and PE deal teams to design pragmatic programs, build operating models, and drive measurable outcomes.
The ideal candidate brings deep expertise in GRC frameworks, regulatory compliance, and privacy, strong consulting instincts, and a proven ability to lead teams and manage multiple client workstreams.
Key Responsibilities:
Client Advisory & Delivery:
· Lead end-to-end GRC and privacy engagements, including scoping, planning, execution, and executive reporting.
· Design and operationalize cybersecurity governance models (policies, standards, risk appetite, committees, reporting KPIs/KRIs).
· Build and mature enterprise risk programs: risk assessments, risk registers, control libraries, and control testing approaches.
· Develop and implement security policies, standards, and procedures aligned to common frameworks (e.g., NIST CSF, ISO 27001/27002, CIS, SOC 2).
· Support regulatory readiness and compliance initiatives (e.g., SEC cyber disclosure support, NYDFS 500, GDPR/UK GDPR, CCPA/CPRA, HIPAA, PCI DSS, SOX ITGC alignment where applicable).
· Stand up or enhance privacy programs: data mapping/inventories, DPIAs/PIAs, DSAR processes, retention, consent management, third-party privacy risk, and privacy by design.
· Perform vendor/third-party risk assessments and implement scalable TPRM operating models.
· Coordinate cross-functional stakeholders (Legal, IT, Security, Compliance, Product, HR) to drive outcomes and adoption.
Executive Communication & Stakeholder Management:
· Translate complex technical, regulatory, and privacy requirements into business-oriented recommendations.
· Deliver executive-ready artifacts: board/audit committee materials, roadmaps, operating models, heatmaps, and risk dashboards.
· Serve as a trusted advisor to senior leadership; confidently present findings and influence decisions.
Practice Development & Leadership:
· Contribute to go-to-market development: offerings, templates, accelerators, methodologies, and points of view.
· Support business development through proposal writing, SOW development, client presentations, and solution shaping.
· Mentor and develop consultants and managers; lead teams across multiple engagements while maintaining quality and delivery rigor.
· Partner with other CFGI service lines (Accounting Advisory, CFO Advisory, Technology Enablement) to deliver integrated solutions.
Required Qualifications:
· Eight plus years of relevant experience in cybersecurity GRC, privacy, risk management, compliance, or consulting (level will map to experience).
· A Bachelor’s degree in a relevant field.
· Demonstrated expertise implementing and operationalizing cybersecurity frameworks and control programs: NIST CSF / NIST 800-53 (nice-to-have), ISO 27001/27002, SOC 2, CIS Controls.
· Strong privacy fundamentals and experience with privacy program build-out and operations: GDPR/UK GDPR, CCPA/CPRA; experience with HIPAA/GLBA or other sectoral privacy standards is a plus.
· Experience performing or leading: enterprise/security risk assessments. control design/testing, policy and standards development, TPRM programs, compliance/regulatory readiness programs,
· Exceptional written and verbal communication skills with a track record of producing executive-level deliverables.
· Proven ability to lead teams, manage timelines/budgets, and deliver in a client-facing environment.
Preferred Qualifications (Nice-to-Have):
· Certifications: CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Lead Auditor, CIPM/CIPP (E/US), CDPSE.
· PE/portfolio company experience: rapid maturity uplift, integration, carve-out/stand-up, and pragmatic road mapping.
· Exposure to incident readiness, tabletop exercises, and crisis communications coordination with Legal/Comms.
· Experience supporting audits and assurance activities (SOC 2 readiness, ISO certification readiness, internal audit coordination).
Why CFGI:
· High-impact work with sophisticated clients and private equity portfolio companies.
· Opportunity to shape and scale a fast-growing Cybersecurity practice.
· Collaborative culture with autonomy, flexibility, and strong leadership support.
· Competitive compensation, benefits, and career growth trajectory.
Top Skills
Ccpa
Cis Controls
Gdpr
Hipaa
Iso 27001/27002
Nist Csf
Pci Dss
Soc 2
Similar Jobs
Cloud • Security • Software • Cybersecurity • Automation
Drive enterprise growth across Midwest accounts by leading complex B2B SaaS sales cycles for GitLab's AI-powered DevSecOps platform. Build strategic account plans, coordinate cross-functional teams, manage full sales lifecycle from discovery to implementation, generate pipeline and Net ARR, and provide forecasting and strategic insights to expand long-term customer partnerships.
Top Skills:
Gitlab,Salesforce,Devsecops,Ai,Duo Enterprise,Duo Agent Platform,Sdlc,Saas
Blockchain • Fintech • Payments • Financial Services • Cryptocurrency • Web3
Lead Product Risk Management operations: partner with product and engineering to identify, assess, mitigate, and report product risks; drive processes, policies, tooling, and standards; perform risk assessments, monitoring, executive reporting, and support audits and regulators.
Top Skills:
SQL
Blockchain • Fintech • Payments • Financial Services • Cryptocurrency • Web3
Own regional growth strategy for USDC, scaling liquidity and adoption through partnerships, AI-driven experimentation, and automated growth platforms. Lead cross-functional teams to deliver regionally compliant initiatives and track adoption metrics.
Top Skills:
Ai,Agent-Driven Systems,Experimentation Platforms,Automation Platforms,Blockchain,Stablecoins,Usdc
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
