United States (Remote)2 open jobs
Boutique cybersecurity and GRC consultancy in Fort Worth, Texas, building multi-framework compliance, vCISO/vGRC, GRC tech, and remediation programs focused on real risk reduction.
Hotman Group sells something deceptively simple: a way out of checkbox compliance. The Fort Worth, Texas-based boutique cybersecurity and GRC consultancy takes on organizations tangled in multi-framework obligations - CMMC in the defense supply chain, HIPAA and HITRUST in healthcare, SOC 2 for SaaS, ISO 27001 across financial services and other regulated industries - and reframes the question. The threat model isn't the auditor; it's the gap between what a compliance binder says and what an organization can actually defend when a customer, a regulator, or leadership asks for proof.
The work spans four concrete lines: virtual CISO and virtual GRC leadership that gives clients executive-level security and compliance direction without a full-time hire; multi-framework compliance program development; GRC technology implementation; and cybersecurity remediation of the issues that surface along the way. The stated method is diagnostic first - figure out what is actually broken, what matters most, what needs to happen next - then build programs the client can run and stand behind. That emphasis on remediation and operable programs, rather than passing an audit and walking away, is the differentiator the firm leans on.
Client work runs from Fortune 1000 companies to high-growth startups, which means the engagement surface ranges from mature enterprise security stacks to scrappy teams standing up their first real compliance program. The firm is a Certified Woman-Owned Small Business (WOSB), a designation relevant for teams bidding on federal and supplier-diversity work. Hotman Group is a small, boutique operation by design.
