Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
Minimum 5 years of experience in Cybersecurity, Information Security, Risk Management, Security Consulting, or Security Operations.
Experience conducting cybersecurity risk assessments and security reviews.
Strong understanding of cybersecurity governance, risk management, and compliance practices.
Experience with incident response, vulnerability management, and security operations.
Knowledge of identity and access management principles and technologies.
Experience working with cloud, on-premises, and hybrid technology environments.
Excellent analytical, communication, documentation, and stakeholder management skills.
Nice to have
Experience supporting government agencies, public sector organizations, healthcare, or other regulated industries.
Experience leading cybersecurity improvement initiatives and strategic security programs.
Familiarity with security operations centers (SOC), SIEM platforms, and threat detection technologies.
Experience presenting security recommendations to executive leadership.
Full description
Senior Cybersecurity Consultant
Location: Montgomery County, PA (Hybrid / On-Site)
Employment Type: Full-Time / Contract
Experience: 5+ Years
Position Summary
Montgomery County is seeking an experienced Senior Cybersecurity Consultant to support enterprise-wide cybersecurity initiatives, risk management programs, security operations, compliance efforts, and strategic security planning. The successful candidate will provide expert guidance on cybersecurity governance, security assessments, incident response, identity and access management, data protection, and security awareness programs.
This role requires a strong understanding of cybersecurity frameworks, risk-based decision-making, and the ability to work with technical teams, business stakeholders, and executive leadership to strengthen the County's overall security posture.
Key Responsibilities
Governance, Risk & Compliance (GRC)
- Conduct enterprise and system-level cybersecurity risk assessments.
- Develop risk mitigation strategies and remediation plans.
- Establish and maintain cybersecurity risk registers.
- Review and develop security policies, standards, procedures, and governance documentation.
- Support security audits, compliance initiatives, and regulatory requirements.
- Perform third-party and vendor security risk assessments.
- Provide recommendations to improve security governance and control maturity.
Security Assessments & Technical Reviews
- Perform network, application, infrastructure, and cloud security assessments.
- Conduct vulnerability assessments and recommend remediation actions.
- Coordinate penetration testing activities and analyze findings.
- Review security architecture, system configurations, and access controls.
- Evaluate endpoint security, network security, and threat detection capabilities.
- Identify security gaps and develop practical remediation strategies.
Incident Response & Cyber Resilience
- Develop and enhance incident response plans and procedures.
-
Senior Cybersecurity Consultant at GuruSchools (Montgomery, PA, USA) — aijobsearch
Support cyber incident investigations and response activities.
- Conduct tabletop exercises and cybersecurity simulations.
- Perform root cause analysis and recommend corrective actions.
- Assist with security incident recovery and restoration efforts.
- Collaborate with technical teams during security events and emergencies.
Identity & Access Management (IAM)
- Assess and improve identity and access management programs.
- Review authentication and authorization controls.