Associate Managing Director, Principal Cybersecurity Consultant

Nardello & Co. LLC; New York (NY); On-site; USD 250,000 - 450,000; Full time

Job summary

Nardello & Co. is seeking an Associate Managing Director, Principal Cybersecurity Consultant, to lead and shape cybersecurity engagements across a portfolio of clients. The role blends hands-on technical leadership with strategic practice development and mentoring of future leaders.

Based in New York, this hybrid position requires deep expertise in information security, governance, risk, and compliance, with a proven track record of delivering high-stakes engagements for senior executives.

Qualifications

• Bachelor's degree in information technology, cybersecurity, or related discipline; advanced degree preferred.
• Minimum of 15 years of experience in information security, IT operations, or security consulting.
• Proven ability to manage concurrent complex client engagements with delivery quality and margins.

Responsibilities

• Own delivery quality, consistency, and strategic impact across multiple client engagements.
• Serve as a senior client advisor/vCISO on complex engagements with executive presence.
• Standardize delivery methodologies and enforce quality controls.
• Guide incident response program development, tabletop exercises, and security reviews.
• Drive repeatable engagement frameworks aligning with client objectives, risk, and regulations.
• Contribute to thought leadership, methodology documentation, and IP for market advantage.
• Assist with recruiting, retention, and development of teammates.

Skills

Executive presence

Client advisory

Delivery management

Strategic cybersecurity

Risk management awareness

Education

Bachelor's degree in information technology/cybersecurity

Job description

Position Summary

Reporting to our Managing Director, Head of Cyber Operations and partnering with key stakeholders across the firm, the Associate Managing Director, Principal Cybersecurity Consultant, is responsible for evolving service offerings, driving repeatable delivery methodologies, and serving as a senior client advisor. This position is execution-focused, and accountable for the quality, consistency, and strategic impact of proactive security services delivered across multiple, complex, and concurrent client engagements, ensuring cybersecurity programs align with each client's business objectives, market dynamics, and risk tolerance.

This is a player-coach role; sufficiently hands-on to guide technical assessments and steer high-stakes deliverables, while demonstrating the ability to shape practice strategy and develop the next generation of consulting leaders.

What You’ll Do:

• Own delivery quality, consistency, and strategic impact across a portfolio of concurrent client engagements.
• Serve as a senior client advisor/vCISO on complex, multi-stakeholder engagements requiring executive-level presence and technical depth.
• Standardize delivery methodologies and enforce quality controls across all team engagements.
• Guide technical assessments, incident response program development, tabletop exercises, and security architecture reviews for enterprise clients.
• Drive repeatable engagement frameworks that align cybersecurity programs with each client's business objectives, regulatory environment, and risk tolerance.
• Ensure engagements consistently deliver business-aligned cyber outcomes for clients.
• Contribute to thought leadership, methodology documentation, and practice intellectual property that strengthen the Company's market position.
• Represent the practice in cross-functional planning and discussions with peer leadership across business units.
• Assist with the recruiting, retention, and development of teammates.

Who You Are:

• Bachelor's degree in information technology, cybersecurity, or a related discipline, or equivalent professional experience; advanced degree preferred.
• Minimum of 15 years of experience in information security, IT operations, or security consulting.
• Demonstrated success managing a portfolio of concurrent complex confidential client engagements with accountability for delivery quality, utilization, and margin.
• Track record of building and scaling consulting teams, including hiring, performance management, and career development of directors and senior individual contributors.
• Proven ability to act as a trusted advisor to CISOs, CIOs, and other senior client executives across diverse industries.
• Strong project and program management discipline, with the ability to standardize delivery methodologies and enforce quality across a team.
• Deep understanding of technical and threat trends and their security implications, including cloud migration, identity, OT/IoT, and emerging adversary tradecraft.
• Experience defining security requirements based on business strategy and the regulatory environment, including NIST, ISO 27001, PCI, applicable state laws, and industry best practices.
• Experience leading the development of incident response programs, tabletop exercises, and security architecture reviews for enterprise clients.
• Experience contributing to pre-sales activity, scoping, proposal development, and executive presentations.
• Excellent written and verbal communication skills with the ability to explain complex issues clearly to clients and key internal stakeholders.
• A collaborative, entrepreneurial mindset to support business development and a record of demonstrating credibility, discretion, risk management awareness, sound judgment, integrity, and ethical conduct.

Preferred Qualifications:

• Relevant security certifications such as CISSP, CISM, CCISO, GSLC, GCIH, or equivalent.
• Prior experience in a cybersecurity consultancy and/or an enterprise security leadership role.
• Familiarity with managed security services, delivery models, and how proactive services integrate with detection and response, as well as supply chain risk offerings.
• Demonstrated knowledge of adversary tactics, techniques, and procedures and how they inform proactive controls.
• Experience presenting at industry conferences, contributing to thought leadership, or publishing security research.

Nardello & Co. is an Equal Opportunity Employer.

Nardello & Co. offers a competitive total compensation and benefits pay package.

Work Conditions:

• Professional office environment.
• Hybrid working arrangement.
• Some travel required.

NARDELLO & CO.:

With offices in New York, London, Paris, Washington DC, Hong Kong, Singapore, Los Angeles, San Francisco and Dubai, Nardello & Co. is a global investigations firm whose experienced professionals handle a broad range of matters including due diligence, anti-corruption and fraud investigations, civil and white collar criminal litigation and arbitration support, asset tracing, activist defense, political risk and strategic intelligence, digital investigations and cyber defense, monitorships and independent investigations, and compliance.

Nardello & Co. counts among its clients leading law firms and financial institutions, Fortune 500 and FTSE 100 companies, high-net-worth individuals and family offices, governments, non-governmental organizations, sports organizations, and academic institutions that know that managing risk effectively requires choosing the best investigative partner.

We believe that excellence starts with employing the right people. Our professional team includes former US federal prosecutors, US and international lawyers, former law enforcement personnel and intelligence operatives, licensed investigators, research analysts, former journalists, financial crimes specialists, forensic accountants, and digital forensic experts. Our team is composed of proven performers who think creatively and strategically, adhere to the highest ethical standards, and are committed to excellence.