Position SummaryWe are seeking a highly skilled and client-focused Cybersecurity Consultant to deliver cybersecurity assessments, advisory services, and remediation planning to our higher education clients. The ideal candidate will have a strong technical background combined with a consultative mindset, capable of translating complex security needs into actionable solutions for IT leaders, compliance teams, and institutional stakeholders.
Key Responsibilities- Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations aligned with frameworks such as NIST 800-171, GLBA, and ISO 27001.
- Support clients in the development of security roadmaps, policies, procedures, and incident response plans tailored for academic environments.
- Evaluate existing controls and recommend improvements across areas including identity and access management (IAM), endpoint protection, network security, and cloud security (e.g., Microsoft 365, AWS, Google Workspace).
- Assist institutions with preparation for audits and regulatory compliance (e.g., GLBA Safeguards Rule, PCI DSS, FERPA, HIPAA).
- Conduct internal and external penetration tests and perform vulnerability scans to identify, assess, and report on security weaknesses across network, application, and endpoint systems.
- Provide advisory services on the implementation of security technologies and secure architecture design.
- Deliver executive-level briefings and technical documentation to IT and administrative leadership.
- Stay current on emerging threats, vulnerabilities, and compliance requirements affecting the higher education sector.
- Contribute to internal knowledge sharing and continuous improvement of service offerings.
QualificationsRequired:- Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
- 3+ years of experience in cybersecurity consulting, risk assessments, or information security roles.
- Strong knowledge of NIST Cybersecurity Framework, NIST 800-171, CIS Controls, and/or ISO 27001.
- Familiarity with higher education IT environments, systems, and organizational structures.
- Excellent communication, documentation, and stakeholder engagement skills.
- Experience with Microsoft Entra ID (Azure AD), M365 security tools, or other enterprise solutions.
Preferred:- Industry certifications (e.g., CISSP, CISA, CISM, GIAC, CCSP, or similar).
- Experience working in or consulting for colleges and universities.
- Knowledge of GLBA, FERPA, and HIPAA regulatory frameworks.
- Experience supporting security incident response or security operations.
Travel Requirements- Occasional travel to client campuses may be required, depending on engagement scope.
