Senior Security Advisor

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Act as a trusted advisor to both executive and technical stakeholders regarding cybersecurity strategy, governance, risk management, resilience, and investment priorities.

• Facilitate discovery sessions, stakeholder interviews, executive workshops, and collaborative working sessions.

• Convert intricate security issues into business-risk narratives, prioritized decisions, and actionable improvement roadmaps.

• Deliver findings and recommendations to senior leadership, steering committees, and technical teams.

• Maintain comprehensive knowledge of advanced cyber attacker tactics, techniques, procedures, attacks, and tools.

• Lead assessments of cybersecurity maturity, gaps, risks, security programs, and control effectiveness.

• Evaluate capabilities across governance, identity, cloud, security operations, vulnerability management, incident response, data protection, third-party risk, and cyber resilience.

• Formulate risk-based remediation plans that balance threat exposure, regulatory expectations, operational constraints, costs, and implementation readiness.

• Generate executive reports, technical observations, roadmaps, scorecards, and presentation materials.

• Provide guidance on cybersecurity governance, policies, standards, roles, metrics, and oversight processes.

• Implement frameworks and requirements such as NIST CSF, CIS Controls, ISO/IEC 27001, SOC 2, CMMC, and PCI DSS.

• Link compliance obligations to sustainable security practices.

• Plan and oversee advisory engagements from scoping and kickoff to analysis, quality review, executive presentation, and closeout.

• Mentor consultants, review deliverables, and encourage consistent advisory methods and high-quality client experiences.

• Contribute to proposals, statements of work, estimation, service development, reusable templates, and client-facing thought leadership.

• Identify opportunities to enhance client value while maintaining an objective, trusted-advisor stance.

⛳️ Requirements

• Progressive experience in cybersecurity, information security, risk management, professional services, consulting, or a related field, with a background in leading client-facing work.

• Proven ability to conduct security assessments and formulate strategic, risk-based recommendations tailored to diverse client environments.

• Extensive knowledge of security governance, risk management, security operations, incident response, identity and access management, cloud security, data protection, vulnerability management, and security architecture.

• Experience in facilitating workshops and communicating effectively with both executives and technical practitioners.

• Strong business writing skills, encompassing the ability to produce clear executive summaries, findings, recommendations, roadmaps, and presentation materials.

• Excellent engagement-management capabilities, including managing scope, priorities, stakeholders, dependencies, and multiple concurrent commitments.

• Sound judgment, curiosity, professionalism, and the ability to operate effectively in situations where information is incomplete or stakeholder perspectives differ.

• Experience providing virtual CISO, fractional security leadership, or ongoing strategic advisory services.

• Background in cybersecurity consulting, professional services, or managed security services environments.

• Familiarity with Microsoft security and cloud platforms, such as Azure, Microsoft 365, Entra ID, Defender, Sentinel, Purview, and Intune.

• Experience in regulated, public-sector, or high-sensitivity environments.

• Relevant certifications including CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Implementer or Lead Auditor.

🏝️ Benefits

• Equal opportunity employer.

• Inclusive work environment.

• Interview accommodations or adjustments available upon request.