Senior Cybersecurity & Risk Consultant

We are seeking an experienced Senior Cybersecurity & Risk Consultant to support a municipal government client with cybersecurity assessments, security architecture, risk management, governance, and technology security improvements.

The consultant will assess existing security environments, identify vulnerabilities and risks, recommend appropriate controls, and develop practical security strategies and remediation roadmaps.

Key Responsibilities

• Conduct cybersecurity, technology risk, and security maturity assessments.
• Review existing IT infrastructure, cloud environments, applications, and security architecture.
• Assess identity and access management (IAM), privileged access, authentication, and authorization controls.
• Evaluate cybersecurity risks, vulnerabilities, security gaps, and compliance requirements.
• Provide recommendations for Zero Trust architecture, cloud security, and data protection.
• Review security policies, standards, governance frameworks, and incident management processes.
• Develop security strategies, remediation plans, technical recommendations, and implementation roadmaps.
• Work with IT leadership, technical teams, and business stakeholders to communicate findings and recommendations.
• Prepare executive-level security assessment reports, risk registers, and recommendations.

Key Requirements

• 8–10+ years of experience in cybersecurity consulting, information security, IT risk management, or security architecture.
• Demonstrated experience conducting cybersecurity assessments, risk assessments, and security gap analyses.
• Strong understanding of enterprise security architecture, cloud security, and IAM.
• Experience developing security strategies, controls, remediation recommendations, and roadmaps.
• Knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, or similar.
• Experience with enterprise infrastructure, cloud platforms, and security technologies.
• Strong stakeholder engagement, consulting, technical documentation, and executive reporting skills.

Preferred Technical Experience

• Microsoft Azure security and Microsoft Entra ID.
• Microsoft Defender and related security technologies.
• Zero Trust security architecture.
• Multi-Factor Authentication (MFA).
• Role-Based Access Control (RBAC) and Privileged Identity Management (PIM).
• Vulnerability management, security monitoring, and incident response.
• Cloud security, information protection, and data security controls.