Cyber Risk & IT Audit Director (Hybrid)

Baker Tilly International; Tewksbury (MA); Hybrid; USD 215,436 - 359,060; Full time

Job summary

Baker Tilly is seeking an IT Audit, Cybersecurity & Risk Director to lead cybersecurity advisory services for clients, overseeing risk assessments, due diligence, internal audit support, and penetration testing. This role emphasizes leadership, coaching, and collaboration within a fast-growing risk advisory practice.

The ideal candidate brings 12+ years of cybersecurity consulting experience, certifications (CISSP, CISA or CPA), and hands-on expertise with frameworks like NIST CSF and ISO

Qualifications

• Bachelor’s degree in management/computer information systems, computer science, accounting information systems, or related program.
• CISSP/CISA or CPA certification is required.
• 12+ years of cybersecurity consulting experience; familiarity with NIST CSF, ISO 27001/2 and related frameworks.

Responsibilities

• Oversee delivery of cybersecurity advisory services including risk assessments, due diligence, internal audit support, and penetration testing.
• Develop and mentor team members and contribute to practice growth.
• Coordinate project delivery and ensure high-quality cybersecurity services.
• Interact with client stakeholders to align objectives, timelines and outputs.
• Support business development activities and draft proposals and engagement letters.

Skills

CISSP

CISA

CPA

Cybersecurity consulting

NIST CSF

ISO 27001/2

Penetration testing

Vulnerability scanning

Client facing

Education

Bachelor’s degree in MIS/CS/IS or related

Job description

Baker Tilly is seeking an IT Audit, Cybersecurity & Risk Director to lead cybersecurity advisory services for clients, overseeing risk assessments, due diligence, internal audit support, and penetration testing. This role emphasizes leadership, coaching, and collaboration within a fast-growing risk advisory practice.

The ideal candidate brings 12+ years of cybersecurity consulting experience, certifications (CISSP, CISA or CPA), and hands-on expertise with frameworks like NIST CSF and ISO