Senior Security Consultant

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

AtAHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embraceall candidatesthatwillcontribute to the diversification and enrichment of ideas and perspectives atAHEAD.

Senior consultants are experienced experts in information security and/or information security governance or compliance. Successful candidates support the Security Practice in delivery, business development, and practice development.

This senior consultant will specifically support the cyber advisory program which seeks to advise clients at various points of maturity and help design and improve their cyber security programs. While each client has a different starting point, most start with common infrastructure hardening and hygiene challenges. This senior consultant will be expected to confidently advise on remediation of discovered vulnerabilities. These vulnerabilities may range from common software vulnerabilities to general architecture concerns.

The consultant must leverage previous experience to convey potential impacts and criticality of remediation. The senior consultant is not expected to have knowledge or experience with every vulnerability but must be able to use their knowledge and experience to research potential solutions.

Communicating the impact and criticality of vulnerabilities and remediation is a critical part of this role. This requires the consultant to understand the client’s environment, concerns, business drivers, and potential impact of remediation efforts. Finally, the consultant must be comfortable in acting as authority on recommendations.

The senior consultant is often asked to review and sometimes create common security program documentation such as policies, risk registers, and other assessment documents.

The ability to manage small teams is a requirement for success in this role. This program requires frequent evolution as the program must keep pace with changes in technology, techniques, and vulnerabilities. Because of this, this senior security consultant must be flexible, self-motivated, and willing to take on dynamic challenges.

• Client Delivery
• ○ Facilitate sessions of strategy, roadmap, design, and planning workshops for service engagements
• ○ Effectively communicate risk to stakeholders and work to drive security program success
• ○ Ensure that customer expectations are appropriately set and managed
• ○ Lead project engagement teams through the delivery of consulting service offerings
• ○ Understand vulnerabilities and create remediation plans
• ○ Break down risks or issues into manageable segments, identify the factors that contribute to risk and determine how best to approach the risk
• ○ Creation and finalization of project deliverables, may perform peer review for collateral developed by others on a delivery team
• ○ Presentation of deliverables to client executive management
• ○ Act as the Engagement Lead on customer facing projects, when assigned
• Business Development
• ○ Support business development pursuits through client discovery meetings
• ○ Support sales opportunities throughout the sales cycle, including project scoping, proposal development, and presenting proposals to clients.
• ○ Familiarity with AHEAD’s enterprise service portfolio to identify opportunities for cross-practice collaboration
• Practice Development & Thought Leadership
• ○ Maintain subject matter expertise in security domains and security solutions
• ○ Participate in the development, enhancement, and standardization of AHEAD in-practice service…