Senior Strategic Security Advisor
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Responsibilities:
- Serve as a trusted cybersecurity partner for small to mid-sized organizations across the Greater Minneapolis-St. Paul metro area
- Lead assigned customer advisory relationships, conduct recurring strategic reviews, and present recommendations to executive leadership and boards
- Develop and maintain risk-based security roadmaps, coordinate milestones and stakeholders, track commitments, and escalate stalled initiatives
- Conduct security and compliance assessments and maintain risk registers
- Recommend and document risk mitigation, acceptance, transfer, or avoidance options
- Draft and improve security policies, standards, incident response plans, and governance documentation
- Guide customers through policy, standard, and governance review and approval
- Lead CMMC and Department of Defense readiness advisory work involving NIST SP 800-171, FCI/CUI scoping, SSPs, POA&Ms, control assessments, and evidence preparation
- Advise financial institutions on FFIEC, FDIC, NCUA, OCC, GLBA, and CRI-related security expectations
- Support healthcare customers with HIPAA/HITECH requirements
- Recommend risk-based improvements to security controls, third-party risk, resilience, incident preparedness, and remediation priorities with CIT technical teams
- Collaborate with CIT account managers, customer success, and services teams to coordinate solutions and maintain customer momentum
- Support qualified presales conversations and identify opportunities to address customer governance gaps through additional services
- Provide objective, clear recommendations in the customer’s best interest
Requirements:
- Five or more years of experience in cybersecurity, governance, risk and compliance, or IT consulting, including customer-facing advisory responsibilities
- Strong practical knowledge of CMMC and NIST SP 800-171
- Experience developing or evaluating assessment evidence, SSPs, POA&Ms, or remediation plans
- Knowledge of financial-sector cybersecurity requirements and supervisory expectations, including FFIEC guidance and FDIC, NCUA, or OCC-regulated environments
- Experience with risk assessments, policy development, security frameworks, regulatory interpretation, and practical risk treatment recommendations
- Broad understanding of enterprise infrastructure, cybersecurity controls, and incident preparedness
- Excellent written and verbal communication and executive presentation skills
- Proactive account ownership and ability to collaborate across multiple teams
- Ability to travel to customer sites within the Minneapolis-St. Paul, Minnesota metro area approximately 1-2 times per quarter
- Must be authorized to work in the United States
- Preferred: eight or more years of relevant experience, including an MSP/MSSP, consulting, or vCISO/advisory environment
- Preferred: CISSP, CISM, CISA, CRISC, relevant CMMC credentials, or an advanced degree in a related field
- Preferred: experience advising defense contractors, regulated financial institutions, healthcare organizations, or boards of directors
- Preferred: based in the Minneapolis-St. Paul, Minnesota metro area
Benefits:
- Medical insurance
- Dental insurance
- Vision insurance
- Life and disability insurance
- 401(k) with matching employer contribution
- Flexible work schedules
- Paid volunteer leave
- Paid parental leave
- Flexible paid time off policy
- Employer-sponsored rewards and recognition program
- Competitive incentive programs
Similar Jobs
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.