[Hiring] Senior Cyber Security Consultant @Ferrilli

Role Description

We are seeking a highly skilled and client-focused Cybersecurity Consultant to deliver cybersecurity assessments, advisory services, and remediation planning to our higher education clients. The ideal candidate will have a strong technical background combined with a consultative mindset, capable of translating complex security needs into actionable solutions for IT leaders, compliance teams, and institutional stakeholders.

Key Responsibilities

• Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations aligned with frameworks such as NIST 800-171, GLBA, and ISO 27001.
• Support clients in the development of security roadmaps, policies, procedures, and incident response plans tailored for academic environments.
• Evaluate existing controls and recommend improvements across areas including identity and access management (IAM), endpoint protection, network security, and cloud security (e.g., Microsoft 365, AWS, Google Workspace).
• Assist institutions with preparation for audits and regulatory compliance (e.g., GLBA Safeguards Rule, PCI DSS, FERPA, HIPAA).
• Conduct internal and external penetration tests and perform vulnerability scans to identify, assess, and report on security weaknesses across network, application, and endpoint systems.
• Provide advisory services on the implementation of security technologies and secure architecture design.
• Deliver executive-level briefings and technical documentation to IT and administrative leadership.
• Stay current on emerging threats, vulnerabilities, and compliance requirements affecting the higher education sector.
• Contribute to internal knowledge sharing and continuous improvement of service offerings.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 3+ years of experience in cybersecurity consulting, risk assessments, or information security roles.
• Strong knowledge of NIST Cybersecurity Framework, NIST 800-171, CIS Controls, and/or ISO 27001.
• Familiarity with higher education IT environments, systems, and organizational structures.
• Excellent communication, documentation, and stakeholder engagement skills.
• Experience with Microsoft Entra ID (Azure AD), M365 security tools, or other enterprise solutions.

Requirements

• Industry certifications (e.g., CISSP, CISA, CISM, GIAC, CCSP, or similar).
• Experience working in or consulting for colleges and universities.
• Knowledge of GLBA, FERPA, and HIPAA regulatory frameworks.
• Experience supporting security incident response or security operations.

Travel Requirements

Occasional travel to client campuses may be required, depending on engagement scope.

Benefits

• Work with mission-driven institutions and make a direct impact on student and faculty success.
• Join a collaborative team of cybersecurity professionals dedicated to higher education.
• Enjoy flexible remote work, meaningful projects, and professional development support.