[Hiring] Senior Cybersecurity Compliance Consultant @Intelligent Technical Solutions

Role Description

The Security Advisor (Senior Cybersecurity Compliance Consultant) delivers active security practice management engagements, serving as the assigned security officer (vCISO) for a portfolio of client organizations. The role combines hands-on compliance delivery with client relationship ownership, risk management, and ongoing security advisory work. This position sits at the senior end of the practice, carrying the most complex and highest-regulatory-risk engagements in the portfolio and setting the technical standard for the practice's compliance deliverables.

Job Responsibilities

• Client Advisory & vCISO Delivery:
  • Serve as the assigned security officer (vCISO) for a portfolio of client engagements.
  • Lead recurring meeting cadences and act as the primary point of contact for clients' cybersecurity concerns.
  • Provide regular updates and reports on the status of security initiatives, including performance metrics, findings, and recommendations for improvement.
  • Build strong client relationships and understand each client's unique regulatory and business requirements.
  • Identify above-contract demand and security program growth opportunities within assigned accounts.
  • Track and maintain contract health ensuring that issues with delivery are communicated early.
• Compliance Program Delivery:
  • Lead CMMC Level 1 and Level 2 readiness engagements.
  • Advise clients on CUI scoping, DFARS 252.204-7012 and FAR 52.204-21 obligations.
  • Deliver compliance engagements across additional frameworks as assigned.
  • Advise on sector- and state-specific regimes as engagements require.
  • Map overlapping control sets across frameworks to build unified control matrices.
• Security Assessment & Engineering Support:
  • Conduct comprehensive risk assessments to identify potential threats and vulnerabilities.
  • Oversee data collection efforts to verify compliance and gather critical security information.
  • Review and interpret security tooling outputs across the Microsoft security stack.
• Other Responsibilities:
  • Perform general Security Officer duties.
  • Assist with incident response (IR) activities.
  • Maintain accurate, timely time entries in the PSA (ConnectWise Manage).
  • Contribute to scalable templates, engagement processes, and the practice knowledge base.
  • Serve as an escalation resource on advanced framework interpretation and control-determination questions.
  • Stay informed about emerging threats, vulnerabilities, and regulatory changes.

Qualifications

• CISSP (active and in good standing) — required at time of hire.
• CMMC ecosystem credentials required: CCP (Certified CMMC Professional) active at time of hire.
• Additional certifications a plus: CISM, CRISC, CISA, GIAC (GSLC, GCCC), CompTIA Security+, Security X, Microsoft SC-series.
• Minimum eight (8) years of progressive information security experience.
• Demonstrated ownership of at least two (2) completed CMMC Level 2 readiness engagements.
• Documented working depth in a minimum of three (3) distinct regulatory frameworks.
• Experience defending deliverables and control determinations directly to auditors.
• U.S. person status (U.S. citizen or lawful permanent resident) required.
• U.S.-based remote with reliable availability across U.S. business time zones.

Requirements

• Working command of cybersecurity principles and practices.
• Familiarity with the federal contracting compliance stack.
• Awareness of adjacent privacy and sector regimes.
• Ability to conduct comprehensive risk assessments and map findings to security controls.
• Experience building and maintaining remediation plans (POA&Ms).
• Familiarity with cybersecurity tools and technologies.
• Ability to manage a high volume of concurrent client engagements.
• Excellent communication skills for interacting with client stakeholders.
• Ability to track and report on engagement metrics, compliance status, and deliverable progress.
• Commitment to staying current on emerging trends and technologies in cybersecurity.

Benefits

• Medical Insurance Plan
• Dental & Vision
• Life Insurance
• Disability Coverage
• Paid Time Off (starts at 15 days per year)
• Paid Maternity/Paternity Leave
• Paid US Holidays
• Retirement Plan
• Salary Advancement/Loan
• Health & Wellness Program
• Company-paid training and certification
• Supplemental Life Insurance (Employee-paid)
• Supplemental Health Plans (Employee-paid)