[Hiring] Senior Cybersecurity Consultant @Excentium

Role Description

The Senior Cybersecurity Consultant will serve as a trusted advisor to client leadership, providing hands-on guidance across governance, risk, and compliance (GRC); security assessment and authorization; and enterprise security program development. This role will lead client engagements spanning:

• Gap assessments
• Control implementation support
• Compliance readiness against frameworks such as NIST SP 800-53, NIST SP 800-171, CMMC, ISO 27001/9001/20000-1, and FedRAMP
• Support for Authority to Operate (ATO) preparation

The consultant will develop and present:

• Assessment findings
• Risk register updates
• Remediation roadmaps
• Executive-level briefings to client stakeholders

Will serve as a principal point of contact between assigned clients and Excentium for CPS engagements, demonstrating strong written and oral communication skills and sound judgment in balancing security requirements against client operations and business risk.

As the CPS practice expands, this individual will be expected to take on increasing leadership responsibility:

• Mentoring junior consultants
• Overseeing engagement quality
• Contributing to business development and proposal efforts
• Helping define the practice's service offerings and delivery standards

This individual may support the development of a cloud-based compliance platform designed to help organizations meet CMMC and FedRAMP 20x requirements, contributing security engineering, cloud architecture, and compliance-automation expertise alongside the development team.

Qualifications

• Has extensive experience providing cybersecurity consulting, advisory, or vCISO-type services to commercial or government clients
• Strong understanding of governance, risk, and compliance (GRC) frameworks
• Ability to translate technical risk into business terms for executive audiences
• Demonstrated experience with Risk Management Framework (RMF) and applicable regulations
• Experience supporting CMMC readiness or assessment activities
• Experience supporting ISO management system implementation, maintenance, or audit readiness
• Familiarity with cloud security and authorization processes (AWS, Azure, M365 / Entra ID)
• Experience conducting or overseeing vulnerability and risk assessments
• Ability to independently manage client relationships
• Cloud security engineering experience in AWS and/or Azure
• Exposure to DevSecOps practices and scripting/automation
• Interest or experience supporting a SaaS or cloud product build

Requirements

• Bachelor's degree in Information Technology, Information Assurance and Security, Computer Science, Information Systems, or a related field (equivalent experience considered)
• 10+ years of experience working in cybersecurity
• One or more of the following certifications: CISSP, CISM, or a CMMC certification (CCP or CCA)

Desired Certifications

• CMMC Lead CCA
• Security+ CE
• CCSK or CCZT (Cloud Security Alliance)
• Certified Ethical Hacker (CEH)
• AWS Certified Security – Specialty and/or Microsoft Certified: Azure Security Engineer Associate

Benefits

• Competitive salary
• Comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off