Senior IT Security Advisor Remote Position

Senior IT Security Advisor (Full Time, Remote Position)

Vera Safe is an innovative and successful U.S. headquartered international privacy and cybersecurity compliance consulting firm and law firm.

Watch / listen to learn more about Vera Safe:
Check out our podcast!

Apple Podcast
:

You Tube
:

Vera Safe’s mission:
Provide the world’s best data protection advice, with a human touch. We are seeking a Senior IT Security Advisor to join our growing team and help us pursue this mission.

We are inundated with business from clients who love the way we advise on privacy compliance (hence the need for you!).

This is an excellent opportunity for anyone who wants to join a team working on the cutting edge of privacy, data protection, and cybersecurity, and is excited about assisting a wide range of clients with fractional CISO‑type support, including IT security program design, implementation, and management.

• Oversee Vera Safe’s cybersecurity consulting program through the management of team members, client relationships, and projects/deliverables.
• Expand Vera Safe’s security consulting offerings, with an initial focus on Microsoft 365 hardening, configuration auditing, and risk assessment.
• Further develop internal service delivery methodologies, documentation, templates, and quality control processes.
• Collaborate with sales and marketing to position and refine service offerings.
• Lead and deliver consulting projects, including fractional‑CISO‑type engagements with a strong focus on securing Microsoft 365 environments.
• Conduct detailed cybersecurity risk assessments, including analysis of current security controls, vulnerabilities, and threat landscape.
• Provide oversight and strategic direction for incident response, including breach containment, investigation, and post‑incident review.
• Lead and execute security assessments, architecture reviews, IT security policy drafting and implementation, and remediation planning.
• Communicate findings and recommendations to clients clearly and professionally through written reports and executive briefings or hands‑on implementation.
• Build trusted relationships with client stakeholders, including CISOs, IT directors, and compliance teams.
• Collaborate with project managers and privacy‑focused project teams to determine and meet client requirements and specific project needs. Analyze practical situations and develop solutions to specialized needs.
• Train and mentor consultants and technical specialists on your team.
• Manage project timelines and delivery quality across multiple concurrent engagements.
• Eventually help grow and manage a team of IT security advisors.
• Stay current on evolving security threats and technologies.
• Represent our IT security practice internally and externally, including contributions to client alerts and conference talks.
• Collaborate with Vera Safe’s Professional Services leadership to ensure tight integration between our IT security and privacy advisory services.

• At least six years of hands‑on experience in IT security consulting, IT security engineering, or equivalent.
• At least one relevant certification (e.g., CISA, CISSP, CISM, CRISC, CCSP, SC‑100 Cybersecurity Architect).
• Deep technical expertise in Microsoft Defender XDR, Crowd Strike Falcon, Sentinel One, or other similar technologies.
• Proficiency with IT security standards and frameworks (e.g., NIST CSF, ISO/IEC 27001, NIST 800‑53, NIST 800‑171, CIS Controls).
• Experience performing audit readiness assessments for frameworks and regulations such as HIPAA, ISO (e.g., 2700 series), NIST (e.g., CSF), GLBA, or others.
• Technical background in scripting, automation, or security tooling (e.g., Power Shell, Sentinel, Defender for Endpoint).
• Experience developing and conducting tabletop exercises such as Business Continuity and Disaster Recovery scenarios.
• Strong understanding of email security (DKIM, DMARC, SPF).
• Familiarity with security stacks to include SIEM/SOAR, IAM, EDR, CASB, etc.
• Strong understanding of cloud security posture assessments.
• Strong understanding of enterprise security principles, zero‑trust architecture, and IT security risk management.
• Experience leading teams and…