About eSentire

eSentire is on a mission to hunt, investigate and stop cyber threats before they become business disrupting events. We were founded on the premise that if you can’t find a solution, you build it. Entrepreneurship and innovation are in our DNA. Our culture is based on transparency, teamwork, and continuous innovation.

As the authority in Managed Detection and Response, we protect the critical data and applications of 2000+ organizations in 80+ countries, across 35 industries from known and unknown cyber threats.

The Senior Strategic Cybersecurity Consultant will serve as the principal resource for delivering eSentire’s Advisory Services to their assigned client(s). The primary responsibility of this role is to integrate advanced technical, regulatory, and operational expertise with senior management capabilities to deliver comprehensive information security programs, risk management strategies, and regulatory guidance to clients. This individual will collaborate closely with peers on the Advisory Services team to develop and execute comprehensive security program roadmaps, as well as conduct individual assessments and deliver tailored services. Additionally, this individual will be responsible for identifying opportunities to enhance brand and marketing recognition by pinpointing potential conferences, speaking engagements, and other relevant events. This individual will also be responsible for conducting ongoing research and monitoring trends in the broader threat landscape to provide valuable support to the eSentire sales and delivery teams.

Responsibilities

• Provide expert consultation to clients and prospective clients to thoroughly understand and evaluate their information security program requirements. Deliver tailored recommendations that align with business objectives, regulatory standards, and contractual obligations.
• Formulate comprehensive security and cyber resilience strategies/roadmaps that are closely aligned with the client’s business objectives.
• Support the development of Incident Response Plans, Vendor Risk Management strategies, and Information Security Policies.
• Conduct Incident Response tabletop exercises by creating and moderating various hypothetical scenarios.
• Design, evaluate, and execute assessments and services in accordance with industry frameworks and compliance requirements.
• Conduct thorough security architecture reviews to identify gaps and risks and provide strategic recommendations to enhance the client’s security posture.
• Develop security metrics and key performance indicators
• Prepare and present comprehensive security and risk assessment reports to the board and executive team.
• Translate complex technical findings into clear, actionable insights for non-technical stakeholders.
• Track ongoing program maturation progress with assigned client(s)
• Develop strategies to overcome or eliminate obstacles that may hinder effective security program delivery
• Stay updated on the latest security trends, threats, and best practices to inform presentations.
• Create and maintain client relationships, consistently searching for new, potential clients who may benefit from services and products provided
• Other duties shall be assigned as required

Requirements

• Bachelor’s Degree equivalent required.
• (5+) years of previous technical experience in secure engineering/system architecture.
• (5+) years of previous experience with addressing governance, risk, and compliance objectives.
• (10+) years of technology and and/or information security management experience.
• Relevant certifications (e.g., CISSP, CISM) are a plus.
• Strong understanding of NIST CSF, ISO 27001, CIS, NIST 800-53, MITRE, PCI, HIPPA, SOC and other security & compliance frameworks
• Excellent written and verbal communication, listening, and client management skills.