Our client is seeking a cybersecurity consultant(perm job) to serve as a primary program lead and technical advisor across identity and access mgmt, endpoint hardening, cloud security , vulnerability mgmt,third party access and zero trust architecture, MSSP oversight and disaster recovery.Quarterly deliverables are defined and include board cyber maturity updates, PAM/LAPS deployment, phishing-resistant, MFA rollout, CWPP and vulnerability mgmt standup, ZTNA capability rollout and a final year-end remediation summary with a 12 month roadmap. The role carries direct accountability for quarterly evidence packages and NIST based KPI reporting to the Board and external assessors.
MUST HAVE 10 yrs in cybersecurity with at least 5 yrs in program leadership or senior consulting. Demonstrated PAM and LAPS design, deployment and validation exp. Hands on IAM experience including phishing-resistant MFA deployment at scale. Exp governing or transitioning MSSP relationships and SOC operations. Cloud security background including vulnerability remediation, CWWP and log monitoring. Zero Trust architecture knowledge with practical ZTNA implementation exp. NIST CCF fluency applied to control design reporting and quarterly evidence packages.
THIS IS A HYBRID POSITION-on site presence is driven by client need, not a fixed day-of-the week arrangement. Onsite expected for workshops, design reviews, executive sessions, Board reporting preparation and key delivery milestones. Remote flexibility available during planning, documentation and coordination phases. Candidate must be local to the location. Domestic travel is required depending on stakeholder locations and vendor engagement needs.