Principal Security Consultant (Req #1132)

Overview

Lead Security Advisory Services engagements for ePlus clients, driving advisory delivery and revenue growth, shaping the service catalogue, and mentoring the consulting team.

What you'll do

• Map identified cyber risks, data risks, and regulatory requirements to ePlus security and data governance services to achieve measurable improvements in security posture, compliance, and information lifecycle management.
• Lead engagements as a subject matter expert (SME), leading meetings, tracking team tasks, and presenting deliverables to executive, operational, and technical client stakeholders.
• Conduct security and data governance program assessments covering existing technical and administrative controls, data classification and handling, data lifecycle management, privacy and regulatory compliance, and alignment to industry security and governance frameworks.
• Design, develop, and operationalize data governance programs, including governance charters and operating models, data ownership and stewardship models, data classification frameworks, data retention and disposition standards, policy and control documentation, risk scoring methodologies for sensitive and regulated data, and integration with security and compliance programs.
• Develop tailored consulting engagements matched to a client's security and data governance maturity, risk profile, regulatory exposure, and budget constraints.
• Produce engagement deliverables for technical and managerial audiences detailing technical execution, control and governance deficiencies, business and regulatory impact, risk prioritization, and practical remediation strategies.
• Establish credibility with the ePlus sales team and customers as a trusted advisor in cybersecurity and data governance.
• Deliver customer-facing presentations on ePlus core competencies, including security advisory services, governance strategy, compliance alignment, and data governance program development.
• Assist the sales team with account planning for security and data governance services, and with identifying customer business, regulatory, and data management requirements and recommended solution approaches during the sales cycle.
• Contribute to marketing and thought leadership, including research publications, industry conference speaking, blog articles, whitepapers, webinars, and repeatable security and data governance processes and templates.
• Assist with practice development, including improving existing offerings, creating new offerings (including emerging governance and AI/data risk services), and mentoring team members.
• Foster client relationships through strategic guidance, proactive insight, and ongoing advisory support.
• Lead technical scoping and review sessions with client security principals, account executives, sales teams, and customer stakeholders to develop and finalize proposals and Statements of Work.
• Serve as SME for customer staff on proposed services, their design, purpose, delivery methodology, and measurable outcomes.
• Conduct knowledge transfers with solution architects and sales teams on technical and service opportunities, lessons learned, and emerging governance or regulatory trends.
• Assist the sales team with customer satisfaction issues related to recommended solutions and help develop structured remediation or 'get well' plans.
• Identify emerging product or service candidates for sales and services management, particularly in data governance, regulatory evolution, and risk management.
• Complete and/or register for training and maintain relevant certifications in cybersecurity, governance, privacy, and regulatory frameworks as requested and approved by management.
• Participate in weekly service pipeline and progress calls with the Managing Security Consultant, reviewing current pipeline opportunities, the 60-day revenue forecast, win probability, and estimated delivery timelines.

What you'll need

• 5 to 10 years of applicable security consulting experience.
• Security consulting experience in governance, risk and compliance (GRC).
• Hold certifications commensurate with security and GRC focus, such as CRISC, CISA, or CISSP.
• IT audit general controls knowledge.
• Understanding of solution selling and the sales cycle.
• Ability to generate and present customer-facing presentations.
• Familiarity with account planning, pipeline management, and forecasting.
• Ability to draft and compile well-written proposals, statements of work, and customer deliverables.
• Advanced written and oral communication skills.
• Seasoned in technical strategy and architecture steering, review, and documentation.
• Well versed in threat modeling, attack frameworks, and industry standard program frameworks such as NIST, ISO 27001, CIS 20, and PCI.
• Flexibility to accommodate changing client and project schedules and willingness to work extended hours when needed.
• Ability to discuss and sell security consulting engagements based on customer business needs and compliance standards, and to take ownership of closing and completing these engagements.

Nice to have

• Bachelor's degree in Cyber Security and/or Computer Science.

Details

• Remote, US.
• Initial base salary range of $160,000 to $210,000 annually, plus possible commissions and discretionary bonuses.
• At-will position.
• Seated and occasional standing or walking activities.