Cyber Security Consultant

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm is a member of a family of companies with experience in all 50 states, and clients in three Canadian provinces and Europe.

PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit

Collaborating with our Technology Consulting team, you will help organizations streamline operations and achieve strategic goals to serve the public better. We provide the full spectrum of technology consulting services to help state and local agencies meet operational and program needs that enhance the lives of their user base.

• Strategy, Architecture, Planning, and Procurement
• Business Enablement
• Business Solutions
• Project Assurance
• Performs security assessments of information technology (IT) systems to verify they comply with applicable security standards
• Performs reviews and assessments of organizational security controls (policies, processes, configurations) to verify they comply with applicable security standards
• Coordinates and/or conducts penetration testing or simulates attacks to look for vulnerabilities in systems before they can be exploited
• Coordinates with client organizations (state departments and federal agencies) to perform security audit activities
• Writes and prepares reports that document findings from security assessments and testing
• Advises project managers of security and privacy requirements required by state and federal agencies
• Assists with development and implementation of security standards and best practices
• Interfaces with various architects, technicians, and business leaders to understand organizational needs, capabilities, and constraints related to IT security
• Researches the latest IT security trends
• Learns and adapts to new technologies in the ever-changing world of Information Security
• Creates and documents security and privacy policies, procedures, or contractual language, as required
• Establishes standard documentation and reporting templates for use in assessments
• Recommends security enhancements
• Participates in proposal teams, including writing proposal responses and advising of strategic approaches

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities or skills of personnel so classified.

• B.S. or B.A. degree is a plus, with related business discipline experience.

• 3+ years of experience in information security or information risk management
• General operating knowledge of security for application and infrastructure, security threat/risk/data classification
• Knowledge of industry standards NIST-800, HIPAA, HITECH, FERPA and various security protocols, such as PKI, SSL, Encryption, Data Redacting, DLP
• Familiarity with Fire Eye, Qualys, Email Security Systems, DLP, Data Encryption Antivirus, SIEM (Log Analysis), IRS Publication 1075, and Minimum Acceptable Risk Standards for Exchanges (MARS-E) a big plus
• 3+ years managing or developing IT systems/solutions
• Understanding of various systems, like MS Active Directory, MS Windows, MS Exchange, Unix/Linux OS

• Information security professional certifications such as CEH, CISSP, SANS, CISA, GIAC or similar are highly desired

This position is hybrid with travel/onsite requirements. To be successful at PCG, you must:

• be available during your set working hours
• have a safe, private, and distraction-free environment in which to complete your work
• be able to give your full attention to the completion of your PCG job duties

Some travel to the office or elsewhere may be required for team meetings, client meetings, etc.

We are accepting applications on an ongoing basis until…