[Hiring] IT Security Consultant @AAFCPAS INC

Role Description

AAFCPAs is looking for a motivated, high-energy IT Security Consultant to join our growing Advisory Practice!

In this role, you'll work with a diverse range of clients and technologies, identifying security risks, evaluating IT controls, and recommending practical solutions. From cloud environments and networks to cybersecurity and infrastructure, you'll gain hands-on experience, tackle meaningful challenges, and grow your expertise.

What You'll Do

• IT Security & Risk Assessments
  • Perform IT General Controls (ITGC) testing and assessments.
  • Conduct vulnerability assessments and penetration testing, including external, internal, web application (OWASP Top 10), and wireless testing.
  • Evaluate security configurations for firewalls, mobile device management, wireless networks, endpoint protection, Microsoft 365, and Google Workspace.
  • Assess network security, remote access, disaster recovery, and business continuity programs.
  • Review and evaluate IT policies, procedures, and risk management programs.
  • Conduct phishing assessments using security tools.
• Client Engagement & Consulting
  • Support Managers in planning and delivering client engagements.
  • Conduct client interviews, evaluate controls, and document findings.
  • Develop practical recommendations to address security gaps and business risks.
  • Prepare workpapers, audit documentation, and client reports.
  • Communicate findings and recommendations to clients.
  • Help clients strengthen IT processes, meet compliance requirements, and align with industry frameworks.
• Practice Development
  • Maintain and support information security tools and applications.
  • Research emerging technologies and security solutions.
  • Help improve security reporting, metrics, policies, and procedures.
  • Stay current on cybersecurity best practices, regulations, and industry standards.
  • Learn and practice the next generation of IT Security that involves Agents and AI.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field (relevant experience may be substituted).
• Experience in IT security, cybersecurity, IT auditing, or a related consulting role.
• Strong analytical, organizational, and project management skills.
• Knowledge of Windows, Active Directory, Linux, and Microsoft Office.
• Understanding of cybersecurity principles, IT controls, and security assessment tools.
• Excellent written, verbal, and presentation skills.
• Strong client service skills and the ability to build lasting professional relationships.
• Ability to manage multiple projects while maintaining discretion and confidentiality.
• Authorization to work in the U.S. without sponsorship.

Requirements

• Experience with cloud platforms such as Microsoft Azure, Google Cloud, AWS, or Oracle.
• Familiarity with security tools such as Qualys, Nmap, Nessus, OpenVAS, Burp Suite, Metasploit, or similar platforms.
• Experience with ISO 27001, SOC reporting, HIPAA, or other compliance frameworks.
• Programming or database knowledge, including Python, Java, SQL, HTML, or C#.
• Certifications such as CISA, CISM, Security+, CEH, or CISSP.

Benefits

• Competitive Salary and Bonus Plan
• Flexible, Work from Anywhere Policy (Westborough, Boston, hybrid, or remote)
• Comprehensive Benefits Package (subsidized medical and dental, 401(k), life insurance and disability coverage)
• Generous and Flexible PTO
• On-staff Leadership and Professional Development Coaching and Training
• Complimentary Consultations with AAF Wealth Management Wealth Advisors
• Abundant Learning and Development (CPE) Catalog and Resources
• Firm-sponsored Memberships (AICPA, State CPA Society, and other Associations)
• Zip2CPA and Tailored MBA Programs
• Peer-driven and Partner-nominated Awards
• Team Member Referral Incentives
• Full access to AAFCPAs’ Automation Center of Excellence to streamline manual processes

The salary range for this position reflects a broad set of factors considered in compensation decisions, including—but not limited to—skills, experience, training, certifications, and overall business needs. A reasonable estimate of the current salary range for this role is $90,000 - $105,000 per year not inclusive of bonus potential.

Please note that while this position is remote, occasional travel to client locations, corporate meetings and trainings may be required to facilitate effective collaboration and engagement implementation. All your information will be kept confidential according to EEO guidelines.