Senior Security Advisor

Arctiq•Brentwood, TN

About The Position

Arctiq is seeking an experienced Senior Security Advisor to join its Security Advisory Services team. The role leads complex cybersecurity advisory engagements, builds trusted client relationships, and connects technical security considerations to business risk and organizational priorities. The advisor works with executive leaders, technology teams, security practitioners, and business stakeholders to assess current capabilities, define pragmatic improvement plans, and guide security program decisions. The position also contributes to the development of advisory services and consistent, high-quality client experiences. Arctiq is an equal opportunity employer and welcomes applicants of all backgrounds and perspectives. Accommodations or adjustments are available throughout the interview process and beyond.

Requirements

Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, including experience leading client-facing work.
Demonstrated ability to lead security assessments and develop strategic, risk-based recommendations for varied client environments.
Broad knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.
Experience facilitating workshops and communicating with both executives and technical practitioners.
Excellent business writing skills, including the ability to create executive summaries, findings, recommendations, roadmaps, and presentation materials.
Strong engagement-management skills, including managing scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.
Sound judgment, curiosity, professionalism, and ability to operate effectively when information is incomplete or stakeholder perspectives differ.

Nice To Haves

Experience delivering virtual CISO, fractional security leadership, or ongoing strategic advisory services.
Experience in a cybersecurity consulting, professional services, or managed security services environment.
Working knowledge of Microsoft security and cloud platforms, including Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.
Experience in regulated, public-sector, or high-sensitivity environments.
Relevant certifications such as CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

Responsibilities

Serve as a trusted advisor to executive and technical stakeholders on cybersecurity strategy, governance, risk, resilience, and investment priorities.
Lead discovery sessions, stakeholder interviews, executive workshops, and working sessions to clarify business context, risk tolerance, and desired outcomes.
Translate complex security concerns into concise business-risk narratives, prioritized decisions, and practical improvement roadmaps.
Present findings and recommendations to senior leaders, steering committees, and technical teams.
Maintain in-depth knowledge of advanced cyber attacker tactics, techniques, and procedures, how attacks work, and the tools attackers use.
Lead cybersecurity maturity assessments, gap assessments, risk assessments, security program reviews, and control-effectiveness evaluations across multiple competencies.
Assess capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.
Develop risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, cost, and implementation readiness.
Produce executive reports, technical observations, roadmaps, scorecards, and presentation materials.
Advise clients on the design and improvement of cybersecurity governance, policies, standards, roles, metrics, and oversight processes.
Apply relevant frameworks and requirements, including NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS.
Help clients connect compliance obligations to sustainable security practices rather than checklist-only outcomes.
Plan and manage advisory engagements from scoping and kickoff through analysis, quality review, executive presentation, and closeout.
Mentor consultants, review deliverables, and promote consistent advisory methods and high-quality client experiences.
Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.
Identify opportunities to extend client value while maintaining an objective, trusted-advisor posture.