Senior Strategic Cybersecurity Consultant

eSentire

1d•Remote

About The Position

eSentire is on a mission to hunt, investigate and stop cyber threats before they become business disrupting events. They were founded on the premise that if you can’t find a solution, you build it, fostering entrepreneurship and innovation. Their culture is based on transparency, teamwork, and continuous innovation. As the authority in Managed Detection and Response, eSentire protects the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats. The Senior Strategic Cybersecurity Consultant will serve as the principal resource for delivering eSentire’s Advisory Services to their assigned client(s). The primary responsibility of this role is to integrate advanced technical, regulatory, and operational expertise with senior management capabilities to deliver comprehensive information security programs, risk management strategies, and regulatory guidance to clients. This individual will collaborate closely with peers on the Advisory Services team to develop and execute comprehensive security program roadmaps, as well as conduct individual assessments and deliver tailored services. Additionally, this individual will be responsible for identifying opportunities to enhance brand and marketing recognition by pinpointing potential conferences, speaking engagements, and other relevant events. This individual will also be responsible for conducting ongoing research and monitoring trends in the broader threat landscape to provide valuable support to the eSentire sales and delivery teams.

Requirements

Bachelor’s Degree equivalent required.
(5+) years of previous technical experience in secure engineering/system architecture.
(5+) years of previous experience with addressing governance, risk, and compliance objectives.
(10+) years of technology and/or information security management experience.
Strong understanding of NIST CSF, ISO 27001, CIS, NIST 800-53, MITRE, PCI, HIPPA, SOC and other security & compliance frameworks
Excellent written and verbal communication, listening, and client management skills.
Demonstrated technical, regulatory, and operations management knowledge as well as consultative skills.
Ability to articulate complex technical, regulatory, and operations management information to clients based on relevant assessment details and interpretation of findings.
Proven presentation skills.
Self motivated, strong analytical skills and detail oriented.
Goal oriented, with a proven history of meeting or exceeding client satisfaction expectations.
Occasional travel required.
Capability to provide support across various time zones.

Nice To Haves

Relevant certifications (e.g., CISSP, CISM) are a plus.

Responsibilities

Provide expert consultation to clients and prospective clients to thoroughly understand and evaluate their information security program requirements. Deliver tailored recommendations that align with business objectives, regulatory standards, and contractual obligations.
Formulate comprehensive security and cyber resilience strategies/roadmaps that are closely aligned with the client’s business objectives.
Support the development of Incident Response Plans, Vendor Risk Management strategies, and Information Security Policies.
Conduct Incident Response tabletop exercises by creating and moderating various hypothetical scenarios.
Design, evaluate, and execute assessments and services in accordance with industry frameworks and compliance requirements.
Conduct thorough security architecture reviews to identify gaps and risks and provide strategic recommendations to enhance the client’s security posture.
Develop security metrics and key performance indicators
Prepare and present comprehensive security and risk assessment reports to the board and executive team.
Translate complex technical findings into clear, actionable insights for non-technical stakeholders.
Track ongoing program maturation progress with assigned client(s)
Develop strategies to overcome or eliminate obstacles that may hinder effective security program delivery
Stay updated on the latest security trends, threats, and best practices to inform presentations.
Create and maintain client relationships, consistently searching for new, potential clients who may benefit from services and products provided
Other duties shall be assigned as required