网络安全合规顾问
Cybersecurity Compliance Consultant
这是一个远程职位。
职位名称：网络安全合规顾问
地点：东海岸/西海岸优先（需要频繁出差）
职位类型：全职
汇报对象：高级项目经理
职位简介：
我们正在寻找一位经验丰富的网络安全合规顾问，帮助中小型企业（SMBs）确保符合行业安全法规和合规要求。该职位需要频繁的现场访问，以评估、提供建议并实施网络安全最佳实践，帮助企业保护其数据和运营免受网络威胁。您将作为值得信赖的顾问，指导客户通过CMMC 2.0、NIST、ISO 27001及其他行业标准的监管框架。
主要职责：
合规与监管评估：
对中小型企业进行现场安全和合规评估，以评估其对网络安全法规的遵守情况。
提供详细的报告，包括合规差距、风险分析和量身定制的建议，以满足行业标准。
协助企业为第三方审计和认证做准备。
安全实施与咨询：
指导中小型企业制定和实施安全政策、流程和技术控制，以符合监管要求。
协助配置和优化网络安全、防火墙、访问控制和端点防护。
为发现的漏洞提供补救计划，并确保企业采用最佳安全实践。
事件响应与风险缓解：
帮助企业在快速检测、响应和从安全漏洞中恢复方面制定和优化事件响应计划。
进行风险评估，并就网络安全韧性策略提供建议，以减少攻击面。
对关键利益相关者进行网络安全管理和安全意识培训。
安全培训与客户协作：
教育企业主、IT团队和员工关于网络安全卫生、网络钓鱼风险和安全最佳实践。
与中小型企业领导密切合作，优先考虑安全投资并实施成本效益高的解决方案。作为长期的网络安全顾问，帮助企业随着法规的变化保持合规。
要求
资格：
信息科技或相关领域的学士学位（或同等经验）。
行业认证优先（例如CISSP、CISM、CompTIA Security+、CEH、CISA）。在网络安全合规框架方面有深厚的专业知识（CMMC 2.0、NIST 800-171、I）
查看英文原文
This is a remote position.
Job Title:Cybersecurity Compliance Consultant
Location: East Coast/West Coast preferred (Frequent Travel Required)
Job Type: Full Time
Reports To: Senior Program Manager Job Summary:
We are looking for an experienced Cybersecurity Compliance Consultant to help small and medium-sized businesses (SMBs) ensure they meet industry security regulations and compliance requirements. This role requires frequent on-site visits to assess, advise, and implement cybersecurity best practices, helping businesses safeguard their data and operations against cyber threats. You will act as a trusted advisor, guiding clients through regulatory frameworks such as CMMC 2.0, NIST, ISO 27001, and other industry standards.
Key Responsibilities:
Compliance & Regulatory Assessments:
Conduct on-site security and compliance assessments for SMBs to evaluate adherence to cybersecurity regulations.
Provide detailed reports with compliance gaps, risk analysis, and tailored recommendations to meet industry standards.
Assist businesses in preparing for third-party audits and certifications.
Security Implementation & Advisory:
Guide SMBs in developing and implementing security policies, procedures, and technical controls to align with regulatory requirements.
Assist in configuring and optimizing network security, firewalls, access controls, and endpoint protection.
Provide remediation plans for identified vulnerabilities and ensure businesses adopt best security practices.
Incident Response & Risk Mitigation:
Help businesses develop and refine incident response plans to quickly detect, respond to, and recover from security breaches.
Conduct risk assessments and advise on cyber resilience strategies to reduce attack surfaces.
Train key stakeholders on cyber risk management and security awareness.
Security Training & Client Collaboration:
Educate business owners, IT teams, and employees on cyber hygiene, phishing risks, and security best practices.
Work closely with SMB leadership to prioritize security investments and implement cost-effective solutions. Serve as a long-term cybersecurity advisor, helping businesses stay compliant as regulations evolve.
Requirements
Qualifications:
Bachelor’s degree in Information Technology, or a related field (or equivalent experience).
Industry certifications highly preferred (e.g., CISSP, CISM, CompTIA Security+, CEH, CISA). Strong expertise in cybersecurity compliance frameworks (CMMC 2.0, NIST 800-171, ISO 27001, HIPAA, PCI-DSS).
Experience conducting security audits, gap assessments, and risk analysis.
Knowledge of firewalls, VPNs, SIEM, EDR, vulnerability management, and security monitoring.
Strong ability to communicate cybersecurity concepts to non-technical business leaders.
Willingness to travel frequently to client sites nationwide.
Preferred Skills:
Experience with cloud security (AWS, Azure, Google Cloud).
Hands-on experience with security tools (SIEM, EDR, vulnerability scanner, firewall)
Familiarity with threat intelligence, advanced persistent threats (APT), and security analytics.
Hands on experience with full domain networks including LAN, WAN, VPN, and Wi-Fi, technologies.
Benefits
Why Join Us?
Competitive salary and benefits.
Opportunities for professional growth and certifications.
Meaningful work in helping businesses stay secure and compliant.
A dynamic, collaborative, and impactful role where you make a real difference.
If you’re passionate about helping businesses navigate cybersecurity regulations and strengthen their defenses, we want to hear from you!
Originally posted on Himalayas