Practice Manager / IT Auditing

360 Advanced, Inc.; Saint Petersburg (FL); On-site; USD 80,000 - 110,000; Full time

Job summary

A cybersecurity and compliance services firm in Saint Petersburg is seeking a full-time Practice Manager. This role involves managing cybersecurity assessment projects, overseeing teams, and ensuring high-quality client deliverables. Candidates should have a relevant Bachelor's degree and at least four years of experience in cybersecurity compliance. Strong leadership and communication skills are necessary, along with the ability to travel as required. Certification in fields like CPA or CISA is mandatory.

Qualifications

• Minimum of 4 years of cybersecurity compliance experience.
• At least 2 years in a supervisory or management role.
• Ability to travel to client locations.

Responsibilities

• Manage cybersecurity compliance and assessment services.
• Oversee projects, teams, and client interactions.
• Document and test information systems for improvements.

Skills

Cybersecurity compliance experience

Executive presence

Written and technical skills

Coaching and mentoring

Team motivation and leadership

Education

Bachelor's Degree in Management Information Systems, Cybersecurity, Accounting, Finance, or related field

Professional certifications (CPA, CISA, CISM, CISSP, ISO 27000 LA, PCI QSA)

Job description

GENERAL DESCRIPTION

The Practice Manager position is a full-time client serving role with the expectation that this person will work overtime as needed to fulfill job and client responsibilities. As the Practice Manager, you will be expected to have a minimum of one of the following designations: CISA, CISSP, QSA, CISM, CPA, PCI QSA, ISO 27000 LA. The primary duties include planning and performing cybersecurity and compliance assessment services; managing projects and overseeing staff; and participating in all other functions associated with the management of the cybersecurity professional services practice.

DUTIES AND RESPONSIBILITIES

• Manage projects, teams, and clients related to our service offerings (SOC reporting, PCI, HIPAA, ISO 27000, NIST 800-53/171, HITRUST, Vendor Privacy Assurance, GDPR and various other risk-based projects)
• Plan, execute, conclude, and manage various cybersecurity assessment and compliance projects based on the unique requirements and circumstances of the project
• Manage a book of business with multiple concurrent projects, including scheduling and administration. Draft and review written audit reports which accurately describe procedures performed and results of testing and the nature of control weaknesses and potential risk exposure
• Use their knowledge and experience to document and test computer information systems for clients; provide recommendations on improvements to technology systems/infrastructure
• Ensures information systems application/infrastructure/controls are operating as intended
• Perform risk-based integrated reviews of financial, accounting, operational, systems and management controls
• Work on multiple projects in varying stages through completion and issuance of final deliverables
• Develop and maintain strong relationships with clients and team members; implement good client and employee retention practices
• Create and maintain a team environment
• Coach, train, and develop less experienced personnel
• Perform a detailed review of workpapers, reports, proposal, and other materials, and ensure high quality deliverables
• Complete original work in technical / complex areas when necessary
• Individual must be able to travel to client locations as needed

REQUIRED QUALIFICATIONS

• Bachelor's Degree in Management Information Systems, Cybersecurity, Accounting, Finance, or related field
• Minimum of at least one of the following certifications is required: CPA, CISA, CISM, CISSP, ISO 27000 LA, PCI QSA
• 4+ years of cybersecurity compliance experience and/or security assessment or architecture design/review
• Executive presence with clients, excellent written and technical skills, and the ability to effectively coach/mentor less experienced personnel
• Team motivator and team leader with the ability to complete engagements within defined timelines and within budget
• Minimum of two years professional services experience at the senior level in a related practice
• 1-3 years supervisory / management experience

DESIRED QUALIFICATION

• MBA or MS from a reputable full-time or executive program is highly desirable
• Willingness to pursue relevant additional professional certifications (e.g., CPA, CISA, CISM, CISSP, ISO 27000 LA, PCI QSA, HITRUST CCSFP, etc.)
• Working knowledge of multiple cybersecurity frameworks, application controls, and software development life cycle and methodologies
• Demonstrate entrepreneurial abilities, client centric, industry savvy, and the ability to work independently or as part of a collaborative team
• Minimum of twenty-five professional services projects successfully completed related to our service offerings
• Demonstrated consistency in cultural values, principles, and work ethic
• Strong, demonstrated technical skills necessary for scoping and executing projects
• Ability to lift and move up to 15 pounds
• Ability to sit for prolonged periods of time.
• Ability to stand, walk, bend, or reach as necessary for job tasks.
• Ability to use hands/fingers for typing, writing, or handling materials.

COMPANY DESCRIPTION

360 Advanced is a Cybersecurity and Compliance professional services firm that provides customized integrated solutions. Our clients range across industries and extend from small businesses to the Fortune 500. We work with client operations in over 40 states and on five continents globally. We are based in downtown St. Petersburg and are looking for a Practice Manager/ IT Auditor to join our team.