Cybersecurity Advisor II

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a trusted consultant for client stakeholders, assisting in the definition and advancement of cybersecurity strategies over multi-month and multi-year projects.

• Create prioritized, business-oriented security roadmaps that enhance the client's security posture over time.

• Provide guidance on governance, risk, and compliance, aligning programs with frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, CMMC, HIPAA, or PCI DSS.

• Convert technical risks into straightforward business terms for executives and board members.

• Manage the advisory relationship for designated clients, ensuring regular communication, measurable progress, and visible risk reduction.

• Collaborate with assessors and engineers to ground recommendations in technical realities and validate remediation efforts.

• Assist clients in developing security programs, including policies, processes, architectural direction, and tooling strategies.

• Support incident preparedness, conduct tabletop exercises, and facilitate post-incident program enhancements as required.

• Contribute to the evolution of Apollo’s advisory methodology, frameworks, and deliverable templates.

• Mentor junior team members and disseminate knowledge throughout the practice.

• Keep abreast of emerging threats, regulatory changes, and the shifting landscape of security technology.

⛳️ Requirements

• Experience in cybersecurity, encompassing client-facing advisory roles, consulting, or security leadership.

• Proven capability to develop and convey cybersecurity strategies and roadmaps to executive audiences.

• In-depth knowledge of one or more key frameworks (NIST CSF, CIS Controls, ISO 27001, CMMC) and strategies for operational implementation.

• Strong grasp of security architecture, controls, and risks in both on-premises and cloud environments.

• Outstanding written and verbal communication skills; able to lead discussions at the executive and board levels.

• Experience in managing long-term client relationships and handling multiple simultaneous engagements.

• Advanced certifications such as CISSP, CISM, CCSP, or CISA (Preferred).

• Previous experience as a vCISO, security manager, or security architect (Preferred).

• Experience in regulated industries or the public sector (Preferred).

• Familiarity with cloud security across Azure, AWS, GCP, and M365 (Preferred).

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance, with the company covering 100% of employee premiums and 90% of dependent premiums on base plans.

• Unlimited paid time off (PTO), 7 paid sick days, and 11 paid holidays.

• 401(k) plan with a 4% company match after 90 days, with immediate vesting.

• Company-sponsored life insurance equivalent to 1x the annual salary.

• Company-funded Short-Term Disability (STD) and Long-Term Disability (LTD) coverage.

• $125 monthly stipend for home office technology, including internet, equipment, and other tech needs.

• Exceptional colleagues, a collaborative work environment, and a supportive culture focused on growth.