Consultant

Who we are

risk3sixty is a bootstrapped, U.S.-based security and compliance firm that has run thousands of implementations and holds an 89 NPS in an industry that averages 57. No outside investors, no board, no PE exit pressure. The people our clients meet are the people doing the work. We help CISOs and GRC teams turn security and compliance from a scramble into a program they can stand behind.

The role

This is a project-level leadership seat. You own client engagements end to end and are accountable for the schedule, scope, and quality of everything your team ships. You are the person a client calls when they want to know where things stand, and the person your Senior Associates and Associates look to for day-to-day direction. You work independently and pull in senior leadership when an issue is genuinely complex or escalated.

You should be comfortable operating inside a GRC software platform and fluent in SOC 2 and HITRUST, since much of the work runs across these frameworks and often more than one at a time.

Primary responsibilities

• Own projects end to end, including planning, execution, delivery, and closeout.
• Manage multiple deliverables within a client engagement.
• Own your personal deliverables and ensure the quality of all project team outputs.
• Provide day-to-day leadership to Senior Associates and Associates.
• Serve as the primary point of contact for clients on delivery matters.

Scope and autonomy

• Project-level ownership with accountability for schedule, scope, and quality.
• Works independently; seeks guidance on complex or escalated issues.

Client interaction

Regular client engagement, status reporting, and issue resolution.

How you'll grow here

This role is built to develop you in three directions: organizing multi-framework and complex engagements, leading at the project level, and communicating with executives across a client's organization.

How success is measured

• Overall project success: quality of reports, timeliness of deadlines, and client satisfaction.
• Team coordination and effective delegation.
• Ability to manage multiple workstreams at once.

• Familiarity with SOC 2 and HITRUST.
• Experience working within a GRC software platform.
• A track record of owning delivery and leading small teams.

Physical requirements

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 10 pounds at times.

Equal employment opportunity

risk3sixty is an equal opportunity employer. We are committed to a workplace free from discrimination and harassment. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran status, pregnancy, or any other characteristic protected by applicable federal, state, or local law. All employment decisions are made on the basis of qualifications, merit, and business need.

Reasonable accommodations

risk3sixty provides reasonable accommodations to qualified individuals with disabilities throughout the application and interview process and in the performance of essential job functions. If you need an accommodation, please let us know and we will work with you.

E-Verify / work authorization

Applicants must be authorized to work in the United States. As a U.S.-based firm, risk3sixty does not provide visa sponsorship for this role.