Senior Security Advisor

Arctiq•Brentwood, TN

About The Position

Arctiq is seeking an experienced Senior Security Advisor to join its Security Advisory Services team. The role leads complex cybersecurity advisory engagements, builds trusted client relationships, and connects technical security concerns with business risk and organizational priorities. The advisor works with executive leaders, technology teams, security practitioners, and business stakeholders to assess current capabilities, define pragmatic improvement plans, and guide decisions about security programs. The role encompasses cybersecurity strategy, governance, risk, resilience, security maturity and control assessments, and risk-based remediation planning. It also includes managing engagements from scoping through closeout, mentoring consultants, producing executive and technical deliverables, and contributing to proposals and service development. The advisor applies relevant frameworks and requirements to help clients develop sustainable security practices.

Requirements

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create clear executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills, including managing scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and ability to work effectively with incomplete information or differing stakeholder perspectives.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.

Nice To Haves

Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Experience in regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

Responsibilities

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions to clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, including how attacks work and the tools used.
Lead cybersecurity maturity, gap, and risk assessments; security program reviews; and control-effectiveness evaluations across multiple competencies.
Assess client capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply relevant frameworks and requirements, including NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.