Principal Consultant, Security Governance

Overview

Presidio, Where Teamwork and Innovation Shape the Future At Presidio, we're at the forefront of a global technology revolution, transforming industries through cutting‑edge digital solutions and next‑generation AI. We empower businesses – and their internal customers – to achieve more through innovation, automation, and intelligent insights.

A Principal Security Governance Consultant is expected to have deep expertise and a vast knowledge base in core information security governance, risk, compliance, and privacy domains. The consultant must present complex solutions concisely, blend multiple service offerings, and deliver a single aggregate final risk report/deliverable and executive presentation for audiences at all levels and skillsets. The consultant will review, understand, and interpret risk‑management and compliance frameworks, security standards, and privacy models.

They must possess a practical understanding of Information Technology, including implementation of technical and administrative controls across various industry verticals and company sizes, assess those controls, and assist in strategically aligning security goals with business objectives. As a PCI QSA company, the role expands the pool of PCI Qualified Security Assessors (QSAs) and CMMC Registered Practitioners (RPs) on the Information Security Governance team to meet client demand.

The ideal consultant holds certifications from both List A and List B of the QSA qualification requirements. If certification is not yet attained, the consultant is expected to achieve it within the first three months of employment, register for PCI QSA training within six months, and complete annual CPEs. If not yet a CMMC RP, certification must be obtained within three months of achieving PCI QSA certification.

• Lead client engagements and project execution providing information security consultation and assessment services, helping clients meet compliance obligations by evaluating their business, technology, and operations against industry security standards.
• Educate, mentor, advise, and share expertise with clients and colleagues to aid decision‑making on topics such as Artificial Intelligence, organizational security strategy, and services scope; provide consultative guidance on complex projects.
• Provide clear, organized findings and recommendations to clients and track progress toward resolution and compliance.
• Consult with C‑level security leaders (CISO, CSO, CIO, etc.) and the Board of Directors of valued strategic clients.
• Develop strategic, operational, and tactical recommendations tailored to each client to improve security posture and compliance.
• Create detailed security roadmaps with short‑term, mid‑term, and long‑term goals that prioritize remediation and address all non‑compliance instances per regulatory, statutory, contractual, and organizational obligations.
• Lead large security engagements in concert with other cybersecurity practices and Presidio teams.
• Develop security policies, standards, and procedures custom‑tailored to each client’s culture, goals, and objectives using industry best practices and compliance requirements.
• Review, analyze, and assess key factors—such as inherent risk, mitigating controls, business impact, likelihood—to determine organizational security risk.
• Ensure and assess client alignment to, and/or compliance with, applicable regulatory, federal, state, local, contractual, and organizational requirements and best‑practice standards such as ISO 27001, NIST CSF, PCI DSS, HIPAA, FERPA, NIST 800‑171, and CMMC.
• Partner with organizations to build a best‑of‑breed security program architecture reference model using frameworks such as ISO 27001, NIST 800‑53, and NIST CSF.
• Collaborate with seasoned Principal Security Consultants to support execution of key services including Cloud Governance, Advisory Services, security program development, documentation review, and security consulting services.
• Execute tabletop exercises, produce After‑Action Reports, and deliver PCI and CMMC advisory services (gap analysis, SAQs, ROCs, AOCs, readiness assessments).
• Assist leadership in cybersecurity…