Cybersecurity Consultant

KAIP; Roseville (CA); On-site; USD 118,000 - 133,000; Full time

Job summary

KAI Partners, Inc. is seeking a Cybersecurity Consulting Advisor to support client cybersecurity program maturity by guiding risk-based decisions and strengthening governance across public sector, higher education, and regulated environments.

This role delivers actionable recommendations, develops assessment reports and remediation roadmaps, and applies frameworks such as NIST CSF, CIS Controls, ISO 27001, and GLBA to reduce risk and improve compliance for diverse clients.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5–9 years of cybersecurity, IT risk, compliance, or security consulting.
• CompTIA Security+ and one of CISSP, CISM, CRISC, or CISA.
• Experience in client-facing or consulting environments.
• Experience supporting public sector, higher education, or regulated environments.

Responsibilities

• Lead and execute cybersecurity consulting engagements, including risk assessments and control gap analyses.
• Develop client-ready artifacts: assessment reports, risk registers, and remediation roadmaps.
• Apply NIST CSF, CIS Controls, ISO 27001, and GLBA to client environments.
• Facilitate interviews, workshops, and presentations to communicate findings.
• Provide subject-matter expertise across governance, risk, compliance, and core cybersecurity domains.

Skills

Risk assessment

Regulatory knowledge

Client-facing

Communication

Education

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science

CompTIA Security+ and CISSP/CISM/CRISC/CISA

Tools

SIEM

EDR

Vulnerability scanning

IAM

Cloud security

Job description

Cybersecurity Consulting Advisor

KAI Partners, Inc. (KAIP) is currently seeking a Cybersecurity Consulting Advisor who supports client cybersecurity program maturity by helping organizations understand risk, strengthen governance, improve security controls, and advance compliance objectives. This role brings cybersecurity, risk management, and regulatory expertise to consulting engagements and contributes practical, business-aligned recommendations that support risk reduction, compliance readiness, and informed decision-making. The role applies a risk-based cybersecurity assurance approach aligned to recognized frameworks and client operating environments, including public sector, higher education, and other regulated environments when applicable.

Responsibilities

• Lead and execute cybersecurity consulting engagements, including risk assessments, control gap analyses, compliance evaluations, and security program reviews, aligned to client scope and objectives.
• Develop and deliver client-ready cybersecurity artifacts, including assessment reports, risk registers, control matrices, remediation roadmaps, and supporting documentation aligned to KAIP quality standards.
• Apply recognized cybersecurity frameworks and regulatory standards, including NIST Cybersecurity Framework (NIST CSF), CIS Critical Security Controls, ISO/IEC 27001, and GLBA, using a risk-based approach tailored to client environments and maturity.
• Facilitate client interactions, including interviews, workshops, tabletop exercises, and presentations, to gather information, validate findings, and communicate actionable recommendations to stakeholders.
• Provide subject-matter expertise across governance, risk, compliance, and core cybersecurity domains, including identity and access management, vulnerability management, cloud security, endpoint and network security, and security awareness.
• Contribute to measurable cybersecurity outcomes, including control effectiveness evaluation, compliance assessment scoring, risk remediation tracking, and security improvement reporting aligned to engagement objectives and quality standards.
• Support continuous improvement of KAIP cybersecurity consulting methodologies, templates, tools, and delivery approaches while collaborating with engagement leadership.
• Perform other duties, as assigned.

Skills and Qualifications

• Ability to assess cybersecurity program maturity, interpret risk, and identify practical improvement opportunities.
• Ability to apply structured consulting methods while adapting approach to client context, maturity, and engagement scope.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, CIS Critical Security Controls, ISO 27001, and GLBA.
• Capability to evaluate control effectiveness, regulatory alignment, and remediation priorities using a risk-based lens.
• Ability to translate regulatory, technical, and operational requirements into clear, client-ready guidance and recommendations.
• Working knowledge of tools and platforms used for security information and event management (SIEM), endpoint detection and response (EDR), vulnerability scanning, identity and access management (IAM), and cloud security.
• Strong analytical, problem-solving, prioritization, and professional judgment skills.
• Strong client-facing communication, facilitation, presentation, documentation, and relationship-management skills.
• Ability to manage multiple workstreams while maintaining responsiveness, quality, transparency, and attention to detail.
• Familiarity with cybersecurity needs in the public sector, higher education, or other regulated environments is preferred.
• Collaborative mindset and commitment to staying current with cybersecurity threats, trends, and best practices.

Work/Education Experience

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent combination of education and relevant experience. (Required)
• 5-9 years of experience in cybersecurity, IT risk, compliance, or security consulting roles. (Required)
• CompTIA Security+ and one additional certification from the following list: CISSP, CISM, CRISC, or CISA.
• Experience working in client-facing or consulting environments. (Preferred)
• Experience supporting public sector, state agency, higher education, or regulated compliance environments. (Preferred)
• Additional cybersecurity, audit, risk, cloud, privacy, or governance certifications beyond the required certification baseline. (Preferred)

Compensation Range: $118,000 - $133,000

The salary range for this role may vary depending on the specific geographic location where this position is ultimately filled. Several factors, including but not limited to a candidate's experience, education, skills, and certifications, pay equity, and organizational needs, are considered when determining the posted salary range. In addition, eligible roles also qualify for a comprehensive benefits package.

Must be able to provide proof of education for all mandatory qualifications; all references will be verified.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

KAI Partners

KAI Partners, Inc. is a Northern California-based small business that offers world-class management consulting and technology services to public and private sector clients on a variety of large-scale projects. The KAI Partners team has over 100 years of combined executive-level experience in information system design, development, implementation, and testing. Our clients benefit from our proven program management, project management, and oversight, program portfolio management, Agile services, organizational change management, training, enterprise architecture, managed IT service, and IT security support.

http://www.kaipartners.com