Manager-Cyber Security

What You'll Do

Typical engagements include:

• Cybersecurity risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, Cloud Security Alliance, and MITRE ATT&CK
• Security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint security, SIEM, IDS/IPS, and firewall platforms
• Security transformation programs — architecture design, solution implementation, and technical remediation
• Threat modeling, penetration testing advisory, and proactive defense strategy
• Capability uplift across Vulnerability Management, Incident Response, IT Disaster Recovery, Business Continuity, Threat Intelligence, and Security Monitoring
• Privacy program audits supporting CCPA/CPRA and GDPR compliance
• PCI-DSS compliance implementation and advisory
• Apply MITRE ATT&CK and other threat modeling methodologies to map adversary techniques and inform defensive controls
• Review and harden application and system disaster recovery plans; identify technical gaps and develop remediation playbooks
• Assess Incident Response preparedness; design IR playbooks, runbooks, and facilitate technical tabletop exercises
• Design logical and technical cloud security architectures and define functional requirements for secure cloud environments
• Architect and implement security controls for cloud-native technologies including containers (Docker/Kubernetes), infrastructure-as-code (Terraform, CloudFormation), and serverless functions
• Design and enforce API security standards and secure integration patterns across cloud platforms (AWS, Azure, GCP)
• Conduct solution-based gap analysis and engineer controls for asset testing, code scanning (SAST/DAST), and application and infrastructure monitoring

Leadership Skills

• Serve as a proactive project leader and self-starter, driving engagement timelines, deliverables, and client confidence forward without needing direction
• Manage multiple concurrent workstreams across assessment, implementation, and compliance activities — keeping teams organized, prioritized, and on schedule across all threads
• Anticipate risks, dependencies, and roadblocks before they escalate, bringing well-reasoned solutions to clients and internal stakeholders proactively
• Lead and coordinate cross-functional project teams across Senior Associates and other practice members, delegating effectively to maintain quality, accountability, and momentum throughout the engagement lifecycle
• Own the full arc of engagement success — from initial scoping and project planning through final delivery — taking personal accountability for client satisfaction, output quality, and measurable outcomes

What You'll Bring