Job description
This is a remote position.
Job Title:Cybersecurity Compliance Consultant
Location: East Coast/West Coast preferred (Frequent Travel Required)
Job Type: Full Time
Reports To: Senior Program Manager Job Summary:
We are looking for an experienced Cybersecurity Compliance Consultant to help small and medium-sized businesses (SMBs) ensure they meet industry security regulations and compliance requirements. This role requires frequent on-site visits to assess, advise, and implement cybersecurity best practices, helping businesses safeguard their data and operations against cyber threats. You will act as a trusted advisor, guiding clients through regulatory frameworks such as CMMC 2.0, NIST, ISO 27001, and other industry standards.
Key Responsibilities:
Compliance & Regulatory Assessments:
Conduct on-site security and compliance assessments for SMBs to evaluate adherence to cybersecurity regulations.
Provide detailed reports with compliance gaps, risk analysis, and tailored recommendations to meet industry standards.
Assist businesses in preparing for third-party audits and certifications.
Security Implementation & Advisory:
Guide SMBs in developing and implementing security policies, procedures, and technical controls to align with regulatory requirements.
Assist in configuring and optimizing network security, firewalls, access controls, and endpoint protection.
Provide remediation plans for identified vulnerabilities and ensure businesses adopt best security practices.
Incident Response & Risk Mitigation:
Help businesses develop and refine incident response plans to quickly detect, respond to, and recover from security breaches.
Conduct risk assessments and advise on cyber resilience strategies to reduce attack surfaces.
Train key stakeholders on cyber risk management and security awareness.
Security Training & Client Collaboration:
Educate business owners, IT teams, and employees on cyber hygiene, phishing risks, and security best practices.
Work closely with SMB leadership to prioritize security investments and implement cost-effective solutions. Serve as a long-term cybersecurity advisor, helping businesses stay compliant as regulations evolve.
Requirements
Qualifications:
Bachelor’s degree in Information Technology, or a related field (or equivalent experience).
Industry certifications highly preferred (e.g., CISSP, CISM, CompTIA Security+, CEH, CISA). Strong expertise in cybersecurity compliance frameworks (CMMC 2.0, NIST 800-171, ISO 27001, HIPAA, PCI-DSS).
Experience conducting security audits, gap assessments, and risk analysis.
Knowledge of firewalls, VPNs, SIEM, EDR, vulnerability management, and security monitoring.
Strong ability to communicate cybersecurity concepts to non-technical business leaders.
Willingness to travel frequently to client sites nationwide.
Preferred Skills:
Experience with cloud security (AWS, Azure, Google Cloud).
Hands-on experience with security tools (SIEM, EDR, vulnerability scanner, firewall)
Familiarity with threat intelligence, advanced persistent threats (APT), and security analytics.
Hands on experience with full domain networks including LAN, WAN, VPN, and Wi-Fi, technologies.
Benefits
Why Join Us?
Competitive salary and benefits.
Opportunities for professional growth and certifications.
Meaningful work in helping businesses stay secure and compliant.
A dynamic, collaborative, and impactful role where you make a real difference.
If you’re passionate about helping businesses navigate cybersecurity regulations and strengthen their defenses, we want to hear from you!
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.