Cybersecurity Governance Consulting Lead

• *Job Title: Cybersecurity Governance Consulting Lead**

Duration: 12 Months (Extension Possible + Long-Term Ad Hoc Support)
• *Start Date: ASAP**
• *Location: Remote**

(Occasional Expensed Travel)
• *Note: Must be comfortable supporting EU time zones**
• *Position Overview**

We are seeking a senior-level
• *NIS2 & Cybersecurity Governance Consulting Lead**

to drive an enterprise-wide cybersecurity remediation initiative. This individual will operate as a Lead/Co-Lead alongside a delivery lead and serve as the primary subject matter expert for cybersecurity governance, regulatory compliance, and enterprise risk management.

This role requires a strong balance of technical/architectural cybersecurity expertise and governance/strategy leadership to effectively design, implement, and remediate enterprise security programs. The engagement will be closely monitored and requires prior experience leading cybersecurity remediation initiatives.
• *Key Responsibilities:**
• *Strategic & Technical Leadership**

Serve as SME for NIS2 and enterprise cybersecurity governance programs

Lead development and execution of cybersecurity compliance initiatives

Provide regulatory interpretation and implementation guidance

Ensure alignment with NIS2, NIST CSF, ISO/IEC 27001/27002, and ISO 27005
• *Enterprise Risk & Assessments**

Lead enterprise asset, control, and risk assessments

Apply risk-based methodologies aligned to ISO 27005

Validate maturity models and gap assessments

Develop prioritized remediation roadmaps
• *Governance & Framework Development**

Design and maintain integrated cybersecurity governance frameworks
Define roles, RACI structures, and escalation models

Develop cybersecurity policies, standards, and procedures

Align controls to regulatory and industry frameworks
• *Incident Response & Resilience**

Provide leadership in incident response and regulatory reporting
Develop playbooks and facilitate tabletop exercises

Conduct post-incident defensibility reviews

Support cyber resilience and business continuity programs
• *Third-Party & Supply Chain Risk**

Lead vendor cybersecurity risk programs

Oversee third-party assessments and monitoring strategies

Integrate supplier risk into enterprise governance
• *Audit & Regulatory Engagement**

Lead audit readiness and mock inspection activities

Support regulatory inquiries and responses

Ensure evidence traceability and regulatory defensibility

Serve as senior advisor during audits
• *Executive Advisory & Stakeholder Engagement**

Act as trusted advisor to executives and IT leadership

Deliver executive-level briefings and governance updates

Facilitate workshops and governance forums

Support organizational change and adoption initiatives
• *Delivery Oversight & Mentorship**

Review and approve critical deliverables

Mentor consulting team members

Contribute to methodology development

Ensure consistency and quality across engagements
• *Required Qualifications**

Bachelor’s degree in Information Security, Computer Science, Engineering, Risk Management, or related field (Master’s preferred)

10+ years of experience in cybersecurity, IT risk, compliance, or governance

Proven experience leading enterprise security or regulatory transformation programs

Deep expertise in NIS2, NIST CSF, ISO/IEC 27001/27002, ISO 27005

Experience in regulated industries (life sciences, healthcare, manufacturing, finance preferred)

Strong knowledge of enterprise IT environments (cloud, identity, infrastructure)

Prior cybersecurity remediation leadership experience required
• *Preferred Certifications**
• *CISSP**
• *CISM**
• *CRISC**
• *ISO 27001 Lead Implementer or Lead Auditor**
• *CISA (Preferred)**
• *Core Competencies**

Regulatory interpretation and application

Risk-based decision making

Governance design and implementation

Executive communication and stakeholder management

Audit defensibility and compliance readiness

Strong analytical and documentation capabilities