IT Audit, Cybersecurity & Risk Director

Responsibilities

• Overseeing the delivery of our cybersecurity advisory services, including cybersecurity risk assessments, technology due diligence assessments, technical IT internal audit assistance, and penetration testing and vulnerability scanning
• Serving as a mentor to team members, supporting their growth and development
• Coordinating project delivery activities and ensuring the quality of cybersecurity services provided by the team
• Directly interacting with key client stakeholders and leadership to align project objectives, schedules, and management activities
• Engaging in business development activities, such as attending networking events and drafting proposals and engagement letters
• Leading open conversations with teams, clients, and stakeholders to build trust and anticipate stakeholder needs
• Applying knowledge of industry regulations and information security frameworks and standards (e.g., NIST CSF, ISO 27001/2, PCI DSS, etc.)

Qualifications

• Bachelor’s degree in management/computer information systems, computer science, accounting information systems, or related field
• CISSP, CISA, or CPA certification required
• 12+ years of experience in cybersecurity consulting
• Experience with NIST CSF, ISO 27001/2, or other related cyber frameworks
• Experience reviewing penetration testing and vulnerability scanning reports
• Experience as a client-serving professional in a consulting firm
• Strong analytical, technical, and problem-solving skills with a keen attention to detail
• Exceptional verbal and written communication, collaboration, and time management skills

Pay

The compensation range for this role is $211,500 to $359,060. Actual compensation is influenced by a variety of factors including but not limited to skills, experience, qualifications, and geographic location.