Our client, a top tier Management & Strategy Consulting firm is looking for an Infrastructure Data Center Consultant with expertise in infrastructure data center compliance to join our growing Tech practice. The ideal contractor will have 5 years of management consulting experience in the financial services or tech industry, with a deep understanding of data center infrastructure, data center compliance (security, resilience, incident response, environmental, workplace safety), and associated risks. Your role will involve collaborating with client teams, designing and enhancing compliance frameworks, and ensuring adherence to regulatory standards. Responsibilities:
- Conduct in-depth assessments of client compliance controls and processes for alignment with regulatory frameworks
- Identify gaps in compliance efforts and propose actionable solutions
- Review audit documentation (SOC 2, ISO 27001, SOX) to integrate existing controls into a new compliance framework
- Design and develop compliance frameworks tailored to global data center operations, addressing themes like physical security, incident management, and vendor risk
- Develop and refine policies, procedures, and controls in collaboration with client teams
- Ensure frameworks are scalable and adaptable to meet evolving regulatory requirements
- Work closely with client's Second Line of Defense (2LOD) teams to ensure alignment and effective implementation.
- Lead the pilot implementation of compliance programs with designated client teams.
- Develop monitoring mechanisms and reporting structures to track compliance progress.
- Conduct regular reviews to ensure effectiveness and sustainability of implemented controls.
- Standardize processes and templates for broader implementation across client operations.
- Provide ongoing support and guidance for continuous improvement of compliance programs.
- Communicate the impact of regulatory changes to client teams and adjust frameworks accordingly.
- Create detailed project plans, compliance documentation, and reports for client leadership and stakeholders.
- Provide clear deliverables, including frameworks, policies, procedures, and audit-readiness materials.
- Support internal initiatives, thought leadership, and people development
- Support client work and lead the development of high-quality, timely client deliverables
- Prepare for and facilitate successful client and internal meetings
- Collaborate with internal and external teams to share knowledge and best practices
Qualifications:
- Bachelor's degree in business or a related field
- 5+ years of experience in data center compliance / risk management
- Strong knowledge of data centers, infrastructure, processes, and risks
- Proven communication, interpersonal, and organizational skills
- Ability to adapt quickly and take initiative in unstructured environments with limited supervision
- Willingness to share knowledge and expertise with colleagues and clients
- Ability to transform domain knowledge and project experiences into published content for Sia Partners Insights
- Experience with data center regulations and standards preferred.
- Certification in risk management or a related field (e.g. CISA, CRCMP, CISM, CRISC) a plus.
- Strong knowledge of relevant risk management frameworks, such as SOC 2, ISO 27001, SOX
- Bachelor's degree in business or a related field
- 5+ years of experience in data center compliance / risk management
- Strong knowledge of data centers, infrastructure, processes, and risks
- Proven communication, interpersonal, and organizational skills
- Ability to adapt quickly and take initiative in unstructured environments with limited supervision
- Willingness to share knowledge and expertise with colleagues and clients
- Ability to transform domain knowledge and project experiences into published content for Sia Partners Insights
- Experience with data center regulations and standards preferred.
- Certification in risk management or a related field (e.g. CISA, CRCMP, CISM, CRISC) a plus.
- Strong knowledge of relevant risk management frameworks, such as SOC 2, ISO 27001, SOX