Cybersecurity Advisor I

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a trusted consultant for client stakeholders throughout multi-month and multi-year projects.

• Create prioritized, business-centric security roadmaps.

• Provide guidance on governance, risk, and compliance, ensuring alignment with NIST CSF 2.0, CIS Controls, ISO 27001, CMMC, HIPAA, or PCI DSS.

• Convert technical risks into understandable business language for executives and board members.

• Manage advisory relationships for designated clients, ensuring consistent progress and risk mitigation.

• Collaborate with assessors and engineers to base recommendations in technical practicality and verify remediation efforts.

• Oversee the development of security programs, including policy creation, process design, architectural direction, and tooling strategy.

• Aid in incident preparedness, conduct tabletop exercises, and enhance post-incident programs.

• Contribute to Apollo’s advisory methodologies, frameworks, and deliverable templates.

• Mentor junior team members and disseminate knowledge throughout the practice.

• Remain informed about emerging threats, regulatory updates, and the evolving security technology environment.

• Complete onboarding, shadow senior advisors, review client portfolios, establish communication rhythms with clients, and produce executive-ready documentation.

• Foster relationships with assessors and engineers and contribute to improvements across the practice.

⛳️ Requirements

• Experience in cybersecurity, including client-facing advisory roles, consulting, or security leadership.

• Proven capability to formulate and articulate cybersecurity strategies and roadmaps to executive stakeholders.

• Extensive knowledge of major frameworks such as NIST CSF, CIS Controls, ISO 27001, or CMMC, along with the ability to implement them effectively.

• Strong grasp of security architecture, controls, and risk management in both on-premises and cloud settings.

• Outstanding written and verbal communication skills, with the ability to lead discussions at executive and board levels.

• Experience in managing long-term client relationships and handling multiple simultaneous engagements.

• Willingness to travel for work, up to 65% of the time.

• Senior-level certifications like CISSP, CISM, CCSP, or CISA (preferred).

• Previous experience as a vCISO, security manager, or security architect (preferred).

• Experience in regulated sectors or public service (preferred).

• Familiarity with cloud security across platforms like Azure, AWS, GCP, and M365 (preferred).

• Must undergo a background check and secure CJIS certification.

• Must possess legal authorization to work in the United States.

• Must not require sponsorship to maintain employment in the United States.

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance; the company pays 100% of employee premiums and 90% of dependent premiums on base plans.

• Unlimited paid time off (PTO).

• 7 paid sick days.

• 11 paid holidays.

• 401(k) plan with a 4% company match after 90 days, with immediate vesting.

• Company-funded life insurance equal to 1x annual salary.

• Company-paid Short-Term Disability (STD) and Long-Term Disability (LTD) coverage.

• $125 monthly stipend for home-office technology expenses, including internet and equipment.

• A collaborative, supportive, and growth-oriented workplace culture.

• Remote work capability.