Information Security Consultant

Heartland Business Systems

Information Security Consultant providing IT risk management and compliance consulting services across various industries. Key responsibilities include risk assessments and incident response activities.

Posted 7/14/2026full-timeWest Des Moines • Iowa • 🇺🇸 United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in implementing Cybersecurity and Compliance Programs, with a strong focus on risk assessment and mitigation strategies. Proficient in developing policies and controls to ensure IT systems adhere to regulatory standards and best practices.

Highest-signal resume keywords

CISSP CertificationCybersecurity Program ImplementationCompliance and Governance Program ImplementationRisk Assessment and MitigationRegulatory Compliance Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentTechnical ControlsAdministrative ControlsPhysical ControlsPolicy DevelopmentIncident ResponseInformation Security FrameworksRegulatory RequirementsDocumentationProject Management

Soft Skills

Attention to DetailCustomer ServiceListening SkillsPresentation SkillsCommunication Skills

Certifications & Qualifications

CISSP

Industry Keywords

PCIHIPAAHITRUSTSOXFISMANISTISOCIS

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements
Review and recommend technical, administrative, and physical controls to mitigate identified risk
Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client’s stated risk tolerance levels
Develop materials and processes to assist clients with implementing both technical and non-technical controls
Assist with incident response during security events

Requirements

What you’ll need

2+ years of related experience
2+ years implementing Cybersecurity Programs
2+ years implementing Compliance and Governance Programs
CISSP or other current industry standard certifications in areas of security expertise
Experience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilities
Ability to identify and evaluate risk to IT systems and associated business processes and communicate risks to management
Demonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)
Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controls
Demonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levels
Ability to develop policies, standards and baseline configurations
Strong attention to detail and ability to document findings and convey information
Ability to manage project deliverables and deadlines
Ability to provide superior customer service via phone and email
Strong listening and presentation skills
Ability to clearly communicate with co-workers, management, clients, and vendors

Benefits

Comp & perks

Minimum of 1450 billed per fiscal year prorated based on start date