Manager-Cyber Security

CrossCountry Consulting LLC; New York (NY); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Healthcare options

401(k) plan

Parental leave

Technology stipends

Wellness reimbursement

Job summary

CrossCountry Consulting LLC seeks a technically strong Cybersecurity Manager for its Cybersecurity & Privacy practice. This hands-on role requires deep expertise in cloud security architecture, risk and compliance frameworks, threat modeling, and security engineering across client environments.

The position is hybrid (60% on-site/client, 40% remote) with local travel. Ideal candidates have 5+ years of Big 4 or related consulting experience and relevant certifications.

Qualifications

• Bachelor's degree in a technical field is required.
• Minimum of 5 years of Big 4 or related consulting experience with hands-on Cybersecurity engineering.
• CISSP, CCSP, AWS/Microsoft cloud certs or equivalent are a plus.

Responsibilities

• Lead IAM program assessments and mature identity governance and least privilege controls.
• Design cloud security architectures across AWS, Azure, and GCP.
• Implement controls for containers, IaC, and serverless with a zero-trust approach.
• Map MITRE ATT&CK techniques to controls and detection coverage.
• Drive security transformation programs and coordinate cross-functional teams.

Skills

Cloud security

Identity & access management

Threat modeling

Zero trust

Security engineering

Security architecture

Education

Bachelor's degree in Information Systems, Computer Science, Mathematics, or related technical field

Tools

Okta

Microsoft Entra ID

SailPoint

CyberArk

BeyondTrust

AWS

Azure

GCP

Kubernetes

Terraform

CloudFormation

Job description

From the beginning, our goal was to establish an advisory firm that stands apart from the rest - one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value. We are seeking a technically strong Cybersecurity Manager to join our high-performing Cybersecurity & Privacy practice. This is a hands‑on role requiring deep expertise across cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The ideal candidate brings a strong technical foundation and the ability to design, implement, and assess security solutions across complex client environments. The position is hybrid (60% on‑site/client, 40% remote) with local travel.

Typical Engagements Include

• Assess and mature IAM programs, including identity governance, privileged access, SSO/MFA, joiner‑mover‑leaver, access reviews, and least privilege across on‑prem and cloud (Okta, Microsoft Entra ID, SailPoint, CyberArk, BeyondTrust)
• Design cloud security architectures for AWS, Azure, and GCP, including identity federation, segmentation, encryption, and logging (AWS IAM/KMS, Azure Policy, GCP IAM, HashiCorp Vault)
• Implement controls for containers, infrastructure‑as‑code, and serverless, with focus on workload identity, secrets management, and policy‑as‑code (Kubernetes, Terraform, CloudFormation, Open Policy Agent, Checkov)
• Design API security standards and secure integration patterns, including OAuth 2.0/OIDC, service‑to‑service authentication, and gateway controls (Apigee, Azure API Management, AWS API Gateway)
• Conduct risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI‑DSS, NIST 800‑53, CSA CCM, and MITRE ATT&CK, emphasizing identity and cloud controls
• Perform security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint, SIEM, IDS/IPS, firewall, and cloud platforms (Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto Networks, Wiz, Prisma Cloud)
• Lead security transformation programs covering architecture, implementation, and remediation, with a zero trust, identity‑centric approach (Zscaler, Netskope)
• Perform threat modeling and penetration testing advisory, including identity‑based attack paths and cloud misconfigurations (BloodHound, Pacu, Burp Suite)
• Apply MITRE ATT&CK to map adversary techniques and inform controls and detection coverage (ATT&CK Navigator, Atomic Red Team)
• Drive capability uplift across IAM, Vulnerability Management, Incident Response, IT DR, Business Continuity, Threat Intelligence, and Security Monitoring (ServiceNow, Recorded Future, Mandiant)
• Assess IR readiness; design playbooks for identity compromise and cloud incidents and facilitate technical tabletop exercises (Cortex XSOAR, Splunk SOAR, Microsoft Defender XDR)
• Review and harden application and system DR plans, identifying gaps and developing remediation playbooks (AWS Elastic Disaster Recovery, Azure Site Recovery, Veeam, Zerto)
• Engineer controls for code scanning (SAST/DAST) and application and infrastructure monitoring, including IAM policy analysis and identity threat detection (Snyk, Checkmarx, SonarQube, Datadog, Entra ID Protection)
• Implement and advise on PCI‑DSS compliance and support CCPA/CPRA and GDPR privacy audits (OneTrust, Drata, Vanta)

Leadership Skills

• Serve as a proactive project leader and self‑starter, driving engagement timelines, deliverables, and client confidence forward without needing direction
• Manage multiple concurrent workstreams across assessment, implementation, and compliance activities — keeping teams organized, prioritized, and on schedule across all threads
• Anticipate risks, dependencies, and roadblocks before they escalation, bringing well‑reasoned solutions to clients and internal stakeholders proactively
• Lead and coordinate cross‑functional project teams across Senior Associates and other practice members, delegating effectively to maintain quality, accountability, and momentum throughout the engagement lifecycle
• Own the full arc of engagement success — from initial scoping and project planning through final delivery — taking personal accountability for client satisfaction, output quality, and measurable outcomes

What You'll Bring

Education And Experience

• Bachelor's degree required in Information Systems, Computer Science, Mathematics, or a related technical field
• Minimum of 5 years of Big 4 or related consulting/professional services experience with hands‑on Cybersecurity engineering and advisory expertise

Certifications

• CISSP — Certified Information Systems Security Professional
• CCSP — Certified Cloud Security Professional
• AWS Certified Security Specialty, Microsoft SC‑100/AZ‑500, or equivalent cloud security certification
• CISM, CEH, OSCP, or other relevant security certifications a plus

Technical Skills

• Cloud platforms: hands‑on experience with AWS, Azure, and/or GCP security services and native security tooling
• Cloud‑native security: containers (Docker, Kubernetes), IaC (Terraform, CloudFormation, Bicep), serverless security, and CI/CD pipeline security
• Network security: Firewalls (Palo Alto, Fortinet, Cisco), VPN, IDS/IPS, micro segmentation, and zero‑trust architecture
• Endpoint & identity security: EDR/XDR platforms, PAM, IAM, MFA, and SSO solutions
• Vulnerability management: Tenable, Qualys, Rapid7, or equivalent; familiarity with CVSS scoring and patch prioritization
• Application security: SAST/DAST tooling, API security testing, secure SDLC practices, and code scanning platforms

Hybrid

Benefits Summary

The CrossCountry total rewards package includes comprehensive healthcare options, including medical, dental, and vision coverage; flexible spending accounts; and a 401(k) with company matching. Additionally, employees can take advantage of generous parental and maternity leave policies, technology stipends, and wellness reimbursement programs, all designed to support both professional growth and personal well‑being. For detailed information about benefits at CrossCountry, please visit our dedicated benefits site: https://www.crosscountry-consulting.com/careers/benefits/

Equal Employment Opportunity (EEO)

CrossCountry provides equal employment opportunities (EEO) to all employees and applicants for employment and believes that respect and fair treatment are critical to creating a productive and inclusive workplace.

As an equal opportunity employer, CrossCountry is fully committed to comply with all federal, state, and local laws and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability, pregnancy, genetics, sexual orientation, veteran status, gender identity or expression or any other protected characteristic. The company also complies with pay transparency and labor laws applicable to all terms and conditions of employment.