Cybersecurity Risk - Senior Consultant

Guidehouse is seeking a Senior Consultant to join its Cyber Team as a Cybersecurity Risk Assessment Consultant. This role requires up to 10% travel and an active Secret clearance.

About the role

The Senior Consultant will oversee the workstream for Cyber Risk Assessments, serving as a team lead to coordinate within the agency and conduct risk assessments for component Bureaus. The role involves close collaboration with other team leaders, IT stakeholders, and federal partners to align with federal cybersecurity mandates and NIST guidance related to cyber risk management and assessment.

Responsibilities

• Oversee, manage, and lead the development and execution of cybersecurity risk assessments, verifying implementation of recommendations to reduce agency cyber risk.
• Apply strong technical writing skills to cyber risk assessments.
• Advise on and incorporate federal cybersecurity risk frameworks such as NIST IR 8286, SP 800-171, SP 800-60, NIST 800-53, NIST SP 1800-39A, FIPS 140-3, and FIPS 199.
• Develop, maintain, and provide input on agency-wide cybersecurity policies, procedures, and documentation related to risk assessment programs (e.g., SOPs, playbooks, guidance, slick sheets).
• Prepare and update risk assessment plans, methodology documentation, standard operating procedures, and project schedules using a range of project management techniques.
• Provide expert guidance to system owners, analysts, and leadership on cybersecurity risk best practices.
• Lead discussions with agency stakeholders to ensure Federal requirements are met, fostering collegial working relationships and delivering technical assistance in standardized formats.
• Present complex risk assessment findings and recommendations to technical and executive audiences, including preparing briefing materials and advising on severity of results.
• Remain flexible to ensure compliance while adapting guidance and technical assistance to address resource constraints, knowledge variability, and strategic direction from government leadership.

Requirements

• Active and current Secret federal security clearance.
• Bachelor’s Degree from an accredited university.
• Minimum of five (5) years of relevant cybersecurity experience, or a Master’s Degree and three (3) years of relevant experience.
• US Citizenship (contractually required).
• Excellent verbal and written communication skills, particularly in report writing.
• Certification in one of the following or another relevant field: CISSP, CRISC, CAP/CGRC, or CISA.

Qualifications

• Experience consulting at large federal agencies (e.g., Department of State, Department of Justice, or Department of Homeland Security) on cybersecurity audits and/or IT controls.
• Demonstrated experience in external client-facing management and/or consulting for large firms.

Pay

The annual salary range for this position is $113,000.00–$188,000.00. Compensation decisions depend on skill sets, experience, training, security clearances, licensure, certifications, and business needs.

Benefits

• Medical, prescription, dental, and vision insurance.
• Personal and family sick time, plus company-paid holidays.
• Discretionary variable incentive bonus eligibility.
• Parental leave and adoption assistance.
• 401(k) retirement plan.
• Basic life and supplemental life insurance.
• Health Savings Account (HSA), dental/vision, and dependent care Flexible Spending Accounts (FSAs).
• Short-term and long-term disability coverage.
• Student loan paydown assistance.
• Tuition reimbursement, personal development, and learning opportunities.
• Skills development and certification support.
• Employee referral program.
• Corporate-sponsored events and community outreach.
• Emergency back-up childcare program.
• Mobility stipend.