Manager, Cloud Security
About The Position
Work with a nationally ranked CPA and advisory firm that is passionate for what's next. Aprio has 30 U.S. office locations, one in the Philippines and more than 2,100 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Join Aprio's Risk Advisory and Assurance team and you will help clients maximize their opportunities. Aprio is a progressive, fast-growing firm looking for a Manager to join their dynamic team. Aprio is seeking an experienced technical manager to lead our cloud security consultants serving small to enterprise organizations across the Defense Industrial Base. This manager role will guide our consultants who are assisting our clients through their CMMC Level 2 certification journey while ensuring our consultants have the right leadership support.
Requirements
- Bachelorâs degree in computer science, Information Security, or related field (Master's preferred)
- 10+ years of progressive in information security and compliance, with significant consulting experience
- 4+ years managing security consultants with proven track record of team productivity
- Deep expertise in securing complex cloud environments, threat modeling, and risk assessment
- Strong cross-functional collaboration skills, balancing security requirements with business objectives
- Clear and persuasive communicator in both writing and verbal settings
- Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams
- Passionate about developing engineers' careers in a supportive yet challenging environment
- 5+ hands-on experience implementing Microsoft security solutions across varied environments
- Experience translating technical requirements into business terms for non-technical stakeholders
- Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
- Azure and Azure Government cloud security configurations
- Microsoft Defender suite deployment and optimization
- Microsoft Purview, Azure Information Protection, and data classification strategies
- Microsoft Sentinel and cost-effective SIEM alternatives
- Identity and Access Management solutions (Azure AD, Conditional Access)
- Network segmentation and boundary protection strategies
- Security documentation and technical writing
- Client Relationship Management: Build trust and credibility with stakeholders at all organizational levels
- Adaptive Communication: Translate technical concepts for audiences from small business owners to enterprise CISOs
- Scalable Solutions Design: Right-size security programs based on organizational maturity, resources, and risk tolerance
- Business Acumen: Balance security requirements with operational realities and budget constraints
- Project Leadership: Manage complex, multi-phase engagements with competing priorities and timelines
- Mentorship: Develop junior consultants and elevate overall team capabilities
- Problem-Solving: Navigate unique challenges across diverse client environments and technical landscapes
Nice To Haves
- CISSP, CISM, or equivalent security leadership certification
- Additional relevant certifications (Security+, CISA, GCIH, GIAC)
Responsibilities
- Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping
- Prepare organizations for C3PAO assessments and provide certification readiness reviews
- · Develop customized remediation roadmaps scaled to client size, budget, and technical capabilities
- Manage resource allocation and workload distribution across concurrent client engagements
- Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.
- Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..
- Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements
- Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels
- Develop standardized methodologies, playbooks, and procedures for technical delivery
- Establish quality assurance processes and peer review mechanisms for client deliverables
- Create training programs to elevate team capabilities in CMMC and Microsoft security technologies
- Foster culture of client success, technical excellence, and continuous learning
- Identify opportunities to expand consulting services and develop new offerings
- Contribute to business development activities and proposal responses
- Represent the practice at client events
- Develop thought leadership content on CMMC implementation best practices
- Build relationships with Microsoft partners, C3PAOs, and industry organizations
- Stay current on CMMC program updates and DoD cybersecurity requirements
Benefits
- Medical, Dental, and Vision Insurance on the first day of employment
- Flexible Spending Account and Dependent Care Account
- 401k with Profit Sharing
- 9+ holidays and discretionary time off structure
- Parental Leave â coverage for both primary and secondary caregivers
- Tuition Assistance Program and CPA support program with cash incentive upon completion
- Discretionary incentive compensation based on firm, group and individual performance
- Incentive compensation related to origination of new client sales
- Top rated wellness program
- Flexible working environment including remote and hybrid options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Number of Employees
1,001-5,000 employees
