This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Senior Security Consultant will lead security architecture design and compliance oversight, ensuring adherence to state security standards and federal regulations. Candidates should have at least ten years of experience in cybersecurity, hold relevant certifications, and possess strong skills in risk assessments and IT governance. A bachelor's degree in a related field is required, with a master's preferred. The role offers a competitive salary range and opportunities for professional growth.
Job Responsibility:
Provides System Integration security architecture design and collaborate with the client to document security standards and provide security architecture advice and oversight to module vendors in support of module solution development, integration, and infrastructure
Responsible for adherence to State security standards, communications with State Chief Information Security Officer (CISO), compliance with HIPAA, Health Information Technology for Economic and Clinical Health (HITECH) and NIST requirements, and Internal Revenue Service (IRS) Federal Tax Information
Requirements:
Minimum ten (10) years of combined, progressive experience in cybersecurity, information assurance, or IT security, including senior advisory, advanced practitioner, or program-level leadership responsibilities
Demonstrated expertise in: Threat modeling
Security architecture
Security and privacy risk assessments across the full Software Development Life Cycle (SDLC) and production environments
Proven experience in IT governance, risk, and compliance (GRC), including: Internal and external audit and compliance assessments
Drafting and maintaining security and privacy documentation
Conducting security and privacy risk assessments
Extensive experience developing and supporting: Security Incident Response Plans
System Security & Privacy Plans (SSPPs)
Risk Assessments and POA&M remediation strategies
Strong experience evaluating, recommending, and supporting the implementation of cybersecurity tools and technologies
Demonstrated experience supporting U.S. Federal programs or agencies, particularly within regulated healthcare or public-sector environments
Holds one or more active security certifications, such as: CISSP
CISM
CISA
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent practical experience)
Nice to have:
Master’s degree in Computer Science, Management Information Systems, Cybersecurity, or a related discipline
Strong working knowledge of Federal cybersecurity frameworks and standards, including: FISMA, NIST SP 800‑53 (Moderate Baseline), NIST/FIPS standards, HIPAA Security Rule, Privacy Act of 1974, FBI CJIS Security Policy, PCI DSS, SSAE 18 / SOC reporting requirements
Comprehensive understanding of security and privacy controls across enterprise systems and applications
Ability to clearly articulate cybersecurity and compliance concepts to technical and non-technical stakeholders
Ability to translate complex security requirements into business, regulatory, and risk context
Experience acting as a cybersecurity Subject Matter Expert (SME) on large-scale, government-funded or highly regulated programs
Client and vendor collaboration experience within consulting or advisory environments
What we offer:
medical insurance
dental insurance
vision insurance with an employer contribution
flexible spending or health savings account
life and AD&D insurance
short and long term disability coverage
paid time off
employee assistance
participation in a 401k program with company match