IT Security Consultant

AAFCPAs; United States; Remote; USD 90,000 - 105,000; Full time

Benefits offered by this job

Flexible work policy

Medical and dental benefits

401(k) plan with company match

Generous PTO

Professional development coaching

Job summary

AAFCPAs is seeking a motivated IT Security Consultant to join our Advisory Practice. You will identify security risks, evaluate IT controls, and propose practical solutions across cloud, network, and security domains.

Collaborate with clients to strengthen IT processes, achieve compliance, and align with industry frameworks. This role offers diverse client engagements, hands-on security work, and opportunities to grow expertise in a growing practice.

Qualifications

• Bachelor's degree in IT, CS, or related field.
• Experience in IT security, cybersecurity, IT auditing, or related consulting role.
• Strong analytical, organizational, and project management skills.
• Knowledge of Windows, Active Directory, Linux.
• Excellent written, verbal, and presentation skills.
• Ability to build lasting client relationships and manage multiple projects.

Responsibilities

• Perform ITGC testing and assessments.
• Conduct vulnerability assessments and penetration tests (OWASP Top 10).
• Evaluate security configurations for firewalls, MDM, networks, and productivity apps.
• Assess network security, remote access, DR/BCP programs.
• Review IT policies, procedures, and risk management programs.
• Communicate findings and recommendations to clients.

Skills

IT security

IT auditing

Client engagement

Project management

Windows

Active Directory

Linux

Communication skills

Education

Bachelor's degree in IT / CS or related field

Tools

Qualys

Nessus

Burp Suite

Metasploit

ISO 27001

Job description

Make an Impact. Strengthen Security. Build Trusted Partnerships.

AAFCPAs is looking for a motivated, high-energy IT Security Consultant to join our growing Advisory Practice!

At AAFCPAs, we help clients bridge the gap between technology, operations and finance, reduce risk, and make smarter business decisions. As a trusted business advisor, our team delivers solutions that strengthen security, improve internal controls, and help organizations navigate an evolving technology landscape.

In this role, you'll work with a diverse range of clients and technologies, identifying security risks, evaluating IT controls, and recommending practical solutions. From cloud environments and networks to cybersecurity and infrastructure, you'll gain hand-on experience, tackle meaningful challenges, and grow your expertise.

What You'll Do

IT Security & Risk Assessments

• Perform IT General Controls (ITGC) testing and assessments.
• Conduct vulnerability assessments and penetration testing, including external, internal, web application (OWASP Top 10), and wireless testing.
• Evaluate security configurations for firewalls, mobile device management, wireless networks, endpoint protection, Microsoft 365, and Google Workspace.
• Assess network security, remote access, disaster recovery, and business continuity programs.
• Review and evaluate IT policies, procedures, and risk management programs.
• Conduct phishing assessments using security tools.

Client Engagement & Consulting

• Support Managers in planning and delivering client engagements.
• Conduct client interviews, evaluate controls, and document findings.
• Develop practical recommendations to address security gaps and business risks.
• Prepare workpapers, audit documentation, and client reports.
• Communicate findings and recommendations to clients.
• Help clients strengthen IT processes, meet compliance requirements, and align with industry frameworks.

Practice Development

• Maintain and support information security tools and applications.
• Research emerging technologies and security solutions.
• Help improve security reporting, metrics, policies, and procedures.
• Stay current on cybersecurity best practices, regulations, and industry standards.
• Learn and practice the next generation of IT Security that involves Agents and AI.

What You'll Bring

• Bachelor's degree in Information Technology, Computer Science, or a related field (relevant experience may be substituted).
• Experience in IT security, cybersecurity, IT auditing, or a related consulting role.
• Strong analytical, organizational, and project management skills.
• Knowledge of Windows, Active Directory, Linux, and Microsoft Office.
• Understanding of cybersecurity principles, IT controls, and security assessment tools.
• Excellent written, verbal, and presentation skills.
• Strong client service skills and the ability to build lasting professional relationships.
• Ability to manage multiple projects while maintaining discretion and confidentiality.
• Authorization to work in the U.S. without sponsorship.

Bonus Points If You Have

• Experience with cloud platforms such as Microsoft Azure, Google Cloud, AWS, or Oracle.
• Familiarity with security tools such as Qualys, Nmap, Nessus, OpenVAS, Burp Suite, Metasploit, or similar platforms.
• Experience with ISO 27001, SOC reporting, HIPAA, or other compliance frameworks.
• Programming or database knowledge, including Python, Java, SQL, HTML, or C#.
• Certifications such as CISA, CISM, Security+, CEH, or CISSP.

Why Join AAFCPAs?

You'll have the opportunity to work across a wide variety of industries, technologies, and client environments while developing your cybersecurity and consulting expertise. If you're curious, solutions-oriented, and passionate about helping organizations become more secure, we'd love to meet you!

Bring your expertise. Grow your career. Make a difference at AAFCPAs.

Benefits

• Competitive Salary and Bonus Plan
• Flexible, Work from Anywhere Policy (Westborough, Boston, hybrid, or remote)
• Comprehensive Benefits Package (subsidized medical and dental, 401(k), life insurance and disability coverage)
• Generous and Flexible PTO
• On-staff Leadership and Professional Development Coaching and Training
• Complimentary Consultations with AAF Wealth Management Wealth Advisors
• Abundant Learning and Development (CPE) Catalog and Resources
• Firm-sponsored Memberships (AICPA, State CPA Society, and other Associations)
• Zip2CPA and Tailored MBA Programs
• Peer-driven and Partner-nominated Awards
• Team Member Referral Incentives
• Full access to AAFCPAs' Automation Center of Excellence to streamline manual processes

The salary range for this position reflects a broad set of factors considered in compensation decisions, including but not limited to skills, experience, training, certifications, and overall business needs. The stated range has not been adjusted for geographic differentials that may apply based on the position’s location. At AAFCPAs, it is uncommon for an individual to be hired at or near the top of the range, as compensation decisions are based on each candidate’s specific background and circumstances. A reasonable estimate of the current salary range for this role is $90,000 - $105,000 per year not inclusive of bonus potential.

• Please note that while this position is remote, occasional travel to client locations, corporate meetings and trainings may be required to facilitate effective collaboration and engagement implementation.

All your information will be kept confidential according to EEO guidelines.