National Security Cyber Governance Lead

Alvarez & Marsal; City of Rochester (NY); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

401(k) retirement plan

Healthcare plans

Paid time off

Job summary

Alvarez & Marsal (A&M) is a leading global consulting firm seeking a security-focused professional to lead national security risk analyses and implement Zero Trust security architectures. You will collaborate across cross-functional teams to evaluate controls, ensure regulatory alignment, and drive remediation for critical client engagements in sensitive tech sectors.

The role emphasizes governance, cloud security, and data protection with opportunities for growth and direct access to senior

Qualifications

• 6+ years of experience with Technology Companies that deliver controlled technology nationally and internationally.
• Experience with NIST CSF, NIST SP 800-53, NIST SP 800-171, NIST SP 800-218, NIST SP 800-161, and/or ISO 27001.
• Experience working in cybersecurity governance (i.e., experience working with NIST CSF; NIST 800-171 and -53; CIS-18 IG1 and ISO 27001).
• Proficiency in at least one programming language (e.g., Python, Java, etc.).
• Background in network and cloud-based platforms (e.g., GCP, AWS, Kubernetes, etc.).
• Familiarity with containerization technologies and deployments.
• Experience with Big Data platforms (on premise and cloud).
• Ability to obtain a USG security clearance
• One or more relevant industry certification: CompTIA Security+, CompTIA CySA+, CompTIA CASP+, CISSP, CISM, CISA, ISO 27001, or comparable certifications

Responsibilities

• Lead cross-functional project teams in executing advisory, oversight, and audit projects related to Foreign Direct Investment (FDI) national security reviews, export and technology controls, and Cybersecurity Maturity Model Certification (CMMC).
• Design and implement Zero Trust architecture frameworks and IAM solutions, including PAM, RBAC, and continuous authentication mechanisms.
• Conduct enterprise-wide security assessments to verify the efficacy of safeguards, with focus on identity governance, access management, and Zero Trust implementation.
• Direct comprehensive security assessments of applications and software, including reviewing architecture diagrams and interviewing DevSecOps teams, evaluating IAM integration, and overseeing code analysis and penetration testing.
• Analyze and interpret penetration test results, focusing on identity-related vulnerabilities and deviations from Zero Trust principles.
• Implement and integrate security technologies including SIEM, IGA, and PAM to enable automated monitoring and oversight.
• Create and maintain project governance artifacts and reporting to ensure alignment with regulatory requirements.
• Availability for up to 20% travel to client sites and security assessment locations.

Skills

Programming languages

Cybersecurity governance

Security clearance readiness

Education

Bachelor's degree in CS or related field

Tools

GCP

AWS

Kubernetes

Containerization

Big Data platforms

Job description

Alvarez & Marsal (A&M) is a leading global consulting firm seeking a security-focused professional to lead national security risk analyses and implement Zero Trust security architectures. You will collaborate across cross-functional teams to evaluate controls, ensure regulatory alignment, and drive remediation for critical client engagements in sensitive tech sectors.

The role emphasizes governance, cloud security, and data protection with opportunities for growth and direct access to senior