Cybersecurity Operations Senior Consultant

RISCPoint Advisory Group - Cambridge, MA

Full-time - Mid Level

Cambridge, MA

Professional, Scientific, and Technical Services

About the position

RISCPoint is seeking a Cybersecurity Operations Senior Consultant who will play a crucial role in leading client cybersecurity programs and objectives. This position requires a conceptual thinker with a self-driven attitude and excellent communication skills to identify, develop, and implement cybersecurity solutions that empower organizations to achieve their security missions. The consultant will work closely with clients to harmonize security and compliance obligations with business success, adapting to the dynamic needs of various cybersecurity frameworks and compliance goals.

Responsibilities

• Advise RISCPoint clients regarding information security best practices and broader compliance programs.
• Oversee client security operations, including Incident Response (IR), Business Continuity & Disaster Recovery (BCDR), security training, vulnerability analysis, and third-party risk management.
• Conduct client workshops and walkthrough meetings to enhance operations across people, process, and technology controls.
• Roadmap security programs tailored to client needs, assessing risks and rewards related to cybersecurity decisions.
• Collaborate on cloud architecture solutions across platforms such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Ensure compliance with relevant Cybersecurity Compliance Frameworks in various industries.
• Lead security training, exercises, and simulations for unified security initiatives.
• Engineer internal Cyber Operations processes to enhance efficiency across multiple departments.
• Coordinate with partnerships across audit firms, managed service providers, regulators, and other third parties.

Requirements

• 2-4 years of successful industry experience in information security and technology.
• Foundational network and security architecture knowledge.
• Understanding of cloud solutions and security technology across various domains.
• Exposure to modern Cybersecurity Compliance Frameworks such as NIST, ISO, SOC, HIPAA, HITRUST, FedRAMP, and CMMC.
• COMPTIA Security+ (Sec+) or equivalent certification.

Nice-to-haves

• Active or pursued advanced security technical certifications and cloud security certifications such as CISM, CISSP, CASP+, AWS, and Azure certifications.
• Desire for continued education through certification and security conferences.

Benefits

• Generous Salary + Bonus Opportunity
• Company Paid Health Insurance
• Company Paid Vision Insurance
• Company Paid Life Insurance
• 401k with 3% Company Contribution (Traditional & Roth Options)
• Flexible Vacation Policy
• Annual Company Retreat