Consultant - Cybersecurity Engineering
Baltimore, MD, United States
Applications have closed
Sia Partners
Sia Partners is a next-generation consulting firm focused on delivering superior value and tangible results to its clients as they navigate the digital revolution. We guide their projects and initiatives in strategy, business transformation, IT...Company Description
Sia Partners is a next-generation consulting firm dedicated to creating state-of-the-art narratives for transformation and innovation and deploying them at scale. Our goal is to deliver superior value and tangible results to our clients as they navigate the digital revolution and achieve transformations which generate a positive impact. Our global footprint and expertise in more than 40 sectors and services allow us to enhance our clients’ businesses worldwide. We guide their projects and initiatives in strategy, business transformation, IT & digital strategy, and Data Science.
Why Join The Sia Village?
Excellence | Entrepreneurship | Innovation | Teamwork | Care & Support | Employee Wellbeing
These are the six core values that guide all our actions. As an expression of our values, our Sia Village concept describes our commitment to fostering a sense of community within and among our offices. We believe that knowledge sharing is the key, not only to innovation, but to the growth and development of our people.
Your experience at Sia Partners will be enriched by a(n):
- Entrepreneurial journey
- Career advocacy program that supports achieving professional development goals through guidance, and real-time feedback
- Continuous learning & development opportunities
- Diversity, equity, and inclusion programs with an ever-growing list of global affinity initiatives
- Annual seminar, an in-person value-add experience, that allows you to network with colleagues throughout North America
Job Description
Our US Cybersecurity team is an integral part of our Global Store Front, providing consulting services to our clients on a wide array of topics, including but not limited to:
Cyber Strategy:
- Cyber for Boards & Executives; Cyber Target Operating Model; Cyber M&A Due Diligence
- Cyber Transformation; Cyber Maturity Assessment & Rating; Cyber Mentoring for Startups
- CISOaaS | DPOaaS | BCMaaS | CMaaS
Cyber Risk:
- Cyber Risk Management; Cyber Risk Assessment & Treatment; Cyber Risk Quantification
- Third-Party Risk Management; Cyber Insider Risk; Cyber Risk Analytics & Reporting
- Cyber Risk Review SaaS: C2R
Cyber Compliance:
- Cyber Compliance Management: ISO 270xx, ISO 27701, ISO 223xx, CMMC, SWIFT CSP, PCI DSS, NIST, etc.
- Cyber Assurance Framework
- Data Privacy Assurance
Cyber Operations:
- Cloud Security
- OT | SCADA | ICS Security; IoT | IIoT | WoT Security
- Security Architecture; Security Configuration
- Infrastructure & Endpoint Protection; Data Protection Technologies
- IAM | PAM | IAG | CIAM | DAG
- SSDLC | SecDevOps
- Cryptography | Encryption
Cyber Resilience:
- Threat hunting; Digital Forensics; Incident Response
- Vulnerability and Patch Management
- Penetration Testing | Red Teaming
- Wargaming and Crisis Management
- IT Service Continuity Management; Business Continuity Management
- Physical Security & Safety
- Operational Resilience
As a management consultant, you will address these topics through that lens. To be effective, you will have to be successful with the following responsibilities:
- Project manage and/or support on a range of client delivery, as part of an on-site or remote project team
- Conduct effective meetings
- Execute on assessments
- Collaborate with internal and client project team members, and contribute to internal communications and readiness activity within the program team and with client groups
- Provide status reporting of progress using the RAID method – Risks, Assumptions, Issues, Dependencies
- Maintain program sites as a repository for all project information
- Contribute to the development of high-quality and timely deliverables
- Perform subject matter research and business analysis
- Assist in the coordination and development of client proposals
- Support practice, thought leadership, and people development
Qualifications
- Bachelor’s degree required in either: Business/Finance, Computer Science, Engineering, IT, Mathematics, etc.
- 2+ years of recent client-facing management consulting experience with an emphasis on cyber related projects, ideally covering one or more of the following topics:
- Cybersecurity requirements, metrics, reporting procedures and control frameworks (NIST, ISO, CMMC, SANS, RCSA, etc.)
- Cyber, IT, BCP/DR policies and procedures
- Third party risk management (TPRM) / vendor risk
- Red / Purple teaming
- Pentesting, vulnerability scans
- Cloud security and/or network expertise (AWS, Azure, GCP)
- Data mapping and lineage
- Incident response and crisis management
- Tabletop exercises
- Knowledge of cryptography and/or blockchain a plus
- Holds or is willing to obtain within the first year of joining one of the following certifications: CISSP, CISM, CISA, CRISC, CEH, etc.
- Ability to demonstrate and apply knowledge of data protection regulation and laws to consulting projects, such as the EU-GDPR, CCPA/CPRA, HIPAA, GLBA, and CDPA
- Strong working knowledge and application of cybersecurity frameworks and standards such as NIST, ISO, etc.
- Based near one of our U.S. operating offices and an eligibility to work within the United States
Additional Information
Compensation & Benefits
- Salary + Annual Discretionary Bonus
- Healthcare coverage that includes medical, dental, vision and life insurance policies
- Generous time off
- Parental leave paid at 100% of base pay for all new parents regardless of gender
- Future Moms Program
- 9 Company Holidays + 1 Floating Holiday
- 401(k) matching
- College save-up plan & college loan repayment plan
- Monthly cell phone stipend
- Commuter Benefits
- Gym Reimbursement through firm medical plan
Our Commitment To Diversity
Diversity, equity, inclusion, and belonging (DEIB) are part of Sia Partners’ DNA. Thanks to our expertise in several sectors and our international growth, our teams include a variety of experiences and cultures. We’re confident that promoting DEIB creates an environment in which everyone can reach their full potential.
Our global network, DEIB@Sia Partners, brings together our people worldwide to facilitate local and global progress, focused on the following areas:
- Gender equality (global Gender Equality Index score of 91/100 for FY19-20)
- LGBTQ+
- Race & Ethnicity
- Working Parents
- Disabilities
Sia Partners is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.
Hybrid Workplace Guidelines
Sia Partners maintains its hybrid workplace arrangements and provides a flexible workplace environment that is driven by client and business/market needs. While our firm does support hybrid work, there are times that we may require our consultants to work onsite at one of our Sia offices or a client office full-time. Consultants are expected to have the ability to be flexible with work location depending upon business needs. When in-between client engagements, Consultants typically work onsite at a local Sia office 2+ times per week.
To learn more about our mission, values, and business sectors, please visit our website.
Sia Partners is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics AWS Azure Blockchain CCPA CEH CISA CISM CISSP Cloud CMMC Compliance Computer Science CRISC Cryptography Encryption Finance Forensics GCP GDPR GLBA HIPAA IAM ICS Incident response Mathematics NIST PCI DSS Pentesting Privacy Red team Risk assessment Risk management SaaS SANS SCADA Security Impact Analysis Strategy Vulnerability scans
Perks/benefits: Career development Cell phone stipend Equity Fitness / gym Flex hours Flex vacation Health care Home office stipend Medical leave Parental leave Salary bonus Startup environment Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Staff Security Engineer jobs
- Open Information Security Specialist jobs
- Open Senior Security Analyst jobs
- Open Security Operations Engineer jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Senior Information Security Analyst jobs
- Open Product Security Engineer jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Cybersecurity Analyst jobs
- Open Cyber Security Specialist jobs
- Open Principal Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Specialist jobs
- Open Security Specialist jobs
- Open Chief Information Security Officer jobs
- Open Security Researcher jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Senior Cyber Security Specialist jobs
- Open Information System Security Officer (ISSO) jobs
- Open Agile-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open CISM-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open IAM-related jobs
- Open CISA-related jobs
- Open Threat intelligence-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open Java-related jobs
- Open Kubernetes-related jobs
- Open EDR-related jobs
- Open Malware-related jobs
- Open APIs-related jobs
- Open IDS-related jobs
- Open Security Clearance-related jobs
- Open DevSecOps-related jobs
- Open CI/CD-related jobs