Cyber Advisor

Resourcive is an independent IT advisory and sourcing firm that helps mid-market and enterprise organizations make better technology decisions. We work primarily with private equity-owned and high-growth companies that are navigating increasing complexity in their technology and security environments. We are vendor-agnostic, process-driven, and focused on outcomes over transactions. Our Cyber Practice works directly with IT and security leaders to design and execute security programs, evaluate and select security providers, and translate technical risk into business decisions their organizations can act on.

We are a small, high-performance team. Everyone here carries real responsibility from day one.

We are looking for a Cyber Security Advisor to join our Cyber Practice and deliver directly to clients. This is not a sales role, not a tools implementation role, and not an internal security role. It is a client-facing advisory position for someone who has already made the transition from practitioner to consultant and is ready to operate with significant autonomy.

You will work with mid-market and enterprise IT and security leaders across a range of engagements: framework-based gap assessments, fractional CISO advisory, security program design and roadmap development, ongoing program management, and structured security technology selections. You will be the person the client calls when they need to understand where they stand, what to do next, and whether their security providers are actually delivering.

This role is approximately 70% advisory and 30% sourcing and vendor selection support.

Advisory and Program Management (primary):

• Lead framework-based gap assessments (NIST CSF, CIS Controls, SOC 2, and similar) and translate findings into prioritized, executable roadmaps the client can act on with their existing team and budget
• Serve as a fractional CISO for mid-market and enterprise clients: advise CIOs and IT Directors on security program structure, vendor management, and risk prioritization
• Design and manage ongoing security programs: define reporting cadence, track initiative progress, manage relationships with MSP and MSSP providers on the client's behalf, and keep the business accountable to the roadmap
• Help clients communicate security posture and investment decisions to executive stakeholders; ghost-write board presentations, business cases, and risk summaries that non-technical leadership can understand and act on
• Adjust program direction as business needs evolve, without losing momentum or client confidence

Sourcing and Vendor Selection (supporting):

• Participate in structured vendor selection processes for security technologies and managed services including MDR, SOC, MSSP, and adjacent tools, using Resourcive's established selection methodology
• The selection process itself is structured and repeatable; your value in this work is your technical credibility and ability to evaluate vendor claims, ask the right questions, and give the client an informed perspective on tradeoffs
• Support contract and commercial negotiations alongside senior advisors

Practice and Credibility Building:

• Represent the Cyber Practice at industry events and conferences as a subject matter expert
• Contribute to the development of our engagement methodology and internal knowledge base

• 5 to 8+ years of cybersecurity experience, with a meaningful portion of that in a client-facing advisory, consulting, or fractional role
• A technical practitioner background (security engineering, incident response, SOC leadership, or similar) that you have already translated into advisory work; you understand how the technology works but your value is no longer in operating it
• Demonstrated ability to manage client relationships at the CIO or Director of IT level: setting expectations, delivering difficult findings, and maintaining trust through a full engagement lifecycle
• Experience designing or managing a security program, not just assessing one; you know what it takes to move an organization from a gap analysis to measurable progress
• Strong written communication skills; the ability to write a clear, credible board summary or executive business case is a meaningful differentiator for this role
• Comfort operating in a small firm environment where you will have significant autonomy and limited administrative support

• Familiarity with security technology categories and the vendor landscape (MDR, SIEM,…