Manager-Cyber Security

CrossCountry Consulting•Los Angeles, CA

1d•Hybrid

About The Position

CrossCountry is seeking a technically strong Cybersecurity Manager to join its Cybersecurity & Privacy practice. This hands-on role requires expertise in cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The manager designs, implements, and assesses security solutions across complex client environments. The position is hybrid, with 60% on-site/client work and 40% remote work, and includes local travel. The role leads cybersecurity engagements spanning identity and access management, cloud and application security, risk and maturity assessments, security tooling, threat modeling, incident response, disaster recovery, compliance, and broader security capability improvements. The manager leads project teams and concurrent workstreams, anticipates risks and dependencies, and takes accountability for engagement planning, delivery quality, client satisfaction, and measurable outcomes.

Requirements

Bachelor's degree in Information Systems, Computer Science, Mathematics, or a related technical field.
At least 5 years of Big 4 or related consulting/professional services experience with hands-on cybersecurity engineering and advisory expertise.
CISSP certification.
CCSP certification.
AWS Certified Security Specialty, Microsoft SC-100/AZ-500, or an equivalent cloud security certification.
Hands-on experience with AWS, Azure, and/or GCP security services and native security tooling.
Experience with cloud-native security, including Docker, Kubernetes, infrastructure-as-code such as Terraform, CloudFormation, or Bicep, serverless security, and CI/CD pipeline security.
Network security experience with firewalls, VPN, IDS/IPS, micro-segmentation, and zero-trust architecture.
Endpoint and identity security experience, including EDR/XDR, PAM, IAM, MFA, and SSO solutions.
Vulnerability-management experience with Tenable, Qualys, Rapid7, or equivalent tools; familiarity with CVSS scoring and patch prioritization.
Application-security experience with SAST/DAST tooling, API security testing, secure SDLC practices, and code-scanning platforms.
Ability to lead projects and manage multiple concurrent workstreams with limited direction.
Ability to coordinate cross-functional teams, delegate work, and take accountability for client satisfaction and engagement outcomes.

Nice To Haves

CISM, CEH, OSCP, or other relevant security certifications.

Responsibilities

Assess and mature IAM programs, including identity governance, privileged access, SSO/MFA, joiner-mover-leaver processes, access reviews, and least privilege across on-premises and cloud environments.
Design cloud security architectures for AWS, Azure, and GCP, including identity federation, segmentation, encryption, and logging.
Implement security controls for containers, infrastructure-as-code, and serverless environments, focusing on workload identity, secrets management, and policy-as-code.
Design API security standards and secure integration patterns, including OAuth 2.0/OIDC, service-to-service authentication, and gateway controls.
Conduct risk and maturity assessments using frameworks and standards including ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, CSA CCM, and MITRE ATT&CK, with emphasis on identity and cloud controls.
Perform security-tool gap analysis, consolidation, and implementation across vulnerability management, endpoint security, SIEM, IDS/IPS, firewalls, and cloud platforms.
Lead security transformation programs covering architecture, implementation, and remediation using a zero-trust, identity-centric approach.
Perform threat-modeling and penetration-testing advisory, including analysis of identity-based attack paths and cloud misconfigurations.
Apply MITRE ATT&CK to map adversary techniques and inform security controls and detection coverage.
Drive capability improvements across IAM, vulnerability management, incident response, IT disaster recovery, business continuity, threat intelligence, and security monitoring.
Assess incident-response readiness; design playbooks for identity compromise and cloud incidents; and facilitate technical tabletop exercises.
Review and harden application and system disaster-recovery plans, identify gaps, and develop remediation playbooks.
Engineer controls for SAST/DAST code scanning and application and infrastructure monitoring, including IAM policy analysis and identity threat detection.
Implement and advise on PCI-DSS compliance and support CCPA/CPRA and GDPR privacy audits.
Proactively lead projects, driving engagement timelines, deliverables, and client confidence.
Manage multiple concurrent assessment, implementation, and compliance workstreams, keeping teams organized, prioritized, and on schedule.
Anticipate risks, dependencies, and roadblocks and proactively propose solutions to clients and internal stakeholders.
Lead and coordinate cross-functional project teams, delegate effectively, and maintain quality, accountability, and momentum.
Own engagement success from scoping and project planning through final delivery, taking accountability for client satisfaction, output quality, and measurable outcomes.