Managing Principal - Cybersecurity

Full-time - Senior

NY

About the position

As a Managing Principal - Cybersecurity, you will lead a team on cybersecurity consulting engagements responsible for managing, controlling, and mitigating client’s risk management strategies. You will be a part of, and leading, teams working in close collaboration with our clients to define the security strategy. You will work alongside industry leaders to gain insight and experience as the practice continues to expand.

Responsibilities

• Perform reviews of platforms and services to assess cyber risks around security risks such as data leakage and unauthorized access, and design controls to mitigate those risks
• Lead the design and development of security policies, standards and procedures across various domains (e.g., Resilience, IT Asset Management Governance, Digital Trust, IAM, Cloud Security, Application Security, etc.)
• Design, develop, and implement security requirements that allow business requirements to be met with appropriate security controls
• Design and develop security policies, standards, and procedures
• Independently lead teams and projects of varying sizes
• Effectively articulate complex topics and discuss business impacts with senior customers, positively influencing outcomes
• Develop high-quality content such as security automation tools, reference security architectures, and white papers to help our consultants, partners, and customers build on the work you deliver

Requirements

• 12+ years of experience in cybersecurity
• Experience working for a management or technology consulting firm required
• In depth knowledge of Cyber frameworks (FFFIEC/NIST/ISO)
• Experience in one or more cybersecurity domains including, but not limited to: Resilience, Data Security, Identity & Access Management, Cloud, Threat/Vulnerability, Digital Trust, Awareness and Training
• Ability to communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms for these stakeholders
• Awareness of security engineering concepts and practices across all phases of the system development lifecycle
• Ability to lead projects independently
• Experience working proposals and putting together solutions
• Writing and storytelling experience, utilizing MS Excel and PowerPoint
• A bachelor’s degree or higher in a cyber or information security related field

Nice-to-haves

• Relevant certifications are a plus (CISM, CISSP, CRISC, CCSK, CISA, CEH, etc.)

Benefits

• Medical, dental and vision insurance
• 401(k) plan
• Tuition reimbursement
• Work culture focused on innovation and creation of lasting value for clients and employees