Resourcive: Cyber Advisor

ScanSource•Greenville, SC

8d•Remote

About The Position

Resourcive is an independent IT advisory and sourcing firm that helps mid-market and enterprise organizations make better technology decisions. We work primarily with private equity-owned and high-growth companies that are navigating increasing complexity in their technology and security environments. We are vendor-agnostic, process-driven, and focused on outcomes over transactions. Our Cyber Practice works directly with IT and security leaders to design and execute security programs, evaluate and select security providers, and translate technical risk into business decisions their organizations can act on. We are a small, high-performance team. Everyone here carries real responsibility from day one. The Role We are looking for a Cyber Security Advisor to join our Cyber Practice and deliver directly to clients. This is not a sales role, not a tools implementation role, and not an internal security role. It is a client-facing advisory position for someone who has already made the transition from practitioner to consultant and is ready to operate with significant autonomy. You will work with mid-market and enterprise IT and security leaders across a range of engagements: framework-based gap assessments, fractional CISO advisory, security program design and roadmap development, ongoing program management, and structured security technology selections. You will be the person the client calls when they need to understand where they stand, what to do next, and whether their security providers are actually delivering. This role is approximately 70% advisory and 30% sourcing and vendor selection support.

Requirements

5 to 8+ years of cybersecurity experience, with a meaningful portion of that in a client-facing advisory, consulting, or fractional role
A technical practitioner background (security engineering, incident response, SOC leadership, or similar) that you have already translated into advisory work; you understand how the technology works but your value is no longer in operating it
Demonstrated ability to manage client relationships at the CIO or Director of IT level: setting expectations, delivering difficult findings, and maintaining trust through a full engagement lifecycle
Experience designing or managing a security program, not just assessing one; you know what it takes to move an organization from a gap analysis to measurable progress
Strong written communication skills; the ability to write a clear, credible board summary or executive business case is a meaningful differentiator for this role
Comfort operating in a small firm environment where you will have significant autonomy and limited administrative support

Nice To Haves

Familiarity with security technology categories and the vendor landscape (MDR, SIEM, MSSP, endpoint, identity); depth here is a plus, not a gate
Experience presenting at industry conferences or contributing to public-facing thought leadership
Relevant certifications (CISSP, CISM, or similar); we care more about demonstrated advisory capability than credential stacking

Responsibilities

Lead framework-based gap assessments (NIST CSF, CIS Controls, SOC 2, and similar) and translate findings into prioritized, executable roadmaps the client can act on with their existing team and budget
Serve as a fractional CISO for mid-market and enterprise clients: advise CIOs and IT Directors on security program structure, vendor management, and risk prioritization
Design and manage ongoing security programs: define reporting cadence, track initiative progress, manage relationships with MSP and MSSP providers on the client's behalf, and keep the business accountable to the roadmap
Help clients communicate security posture and investment decisions to executive stakeholders; ghost-write board presentations, business cases, and risk summaries that non-technical leadership can understand and act on
Adjust program direction as business needs evolve, without losing momentum or client confidence
Participate in structured vendor selection processes for security technologies and managed services including MDR, SOC, MSSP, and adjacent tools, using Resourcive's established selection methodology
Support contract and commercial negotiations alongside senior advisors
Represent the Cyber Practice at industry events and conferences as a subject matter expert
Contribute to the development of our engagement methodology and internal knowledge base