Principal Analyst, Cybersecurity Advisory Services

TekStream Solutions; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

TekStream Solutions is seeking a Principal Analyst in Cybersecurity Advisory Services to serve as the senior-most individual contributor in the practice. You will partner with the Director of Advisory Services, lead complex client engagements, and shape new offerings including AI governance.

Initially no direct reports, with path toward people management as the practice grows. You will connect security, IT operations, cloud, and business teams to build long-term roadmaps, align stakeholders, and

Qualifications

• 8+ years in cybersecurity, IT risk, or IT service management with client-facing consulting or advisory experience.
• Broad knowledge across cybersecurity domains including identity, vulnerability management, cloud security, detection and response, governance, risk, and resilience.
• Experience building multi-year security roadmaps or program strategies for clients or internal leadership.
• Proven track record of aligning security with business goals across IT and business teams.
• Experience leading engagements end to end, managing client relationships, scope, and deliverables.
• Mentoring or guiding other consultants or analysts; coaching to improve delivery quality.
• Proven ability to translate technical initiatives into business outcomes for executives.

Responsibilities

• Lead engagements from discovery through delivery and handoff to clients.
• Own complex or high-visibility work and set directions for teams on engagements.
• Mentor consultants, review deliverables, raise the practice's quality baseline.
• Support scoping, estimates, and statements of work with Director and sales.
• Build repeatable delivery methods, templates, and standards.

Skills

Client-facing consulting

Engagement leadership

Cybersecurity domain knowledge

Roadmapping / program strategy

Mentoring / coaching

Requirements workshops

User stories & acceptance criteria

Cross-functional collaboration

Communication (written & verbal)

Tabletop exercises facilitation

Tools

NIST CSF

ISO 27001

Job description

Back Principal Analyst, Cybersecurity Advisory Services
Other Area(s) Direct Hire Oct 13, 2026

Principal Analyst, Cybersecurity Advisory Services

Location: Remote, US-based. Must be willing to accommodate east coast office hours.

About the role

TekStream is hiring a Principal Analyst, Cybersecurity Advisory Services to be the senior-most individual contributor in our Advisory Services practice. You'll report to the Director of Advisory Services, lead our most complex client engagements, and serve as the Director's go-to partner on delivery, methodology, and new offerings.
This is a senior delivery role with room to grow into leadership. You'll lead engagements from discovery and workshops through requirements, documentation, and handoff, guide and mentor other consultants on your engagements, and help shape new offerings, including our AI governance practice. There are no direct reports on day one, but the role is a path to people management as the practice grows.
You'll bring a broad, program-level view of cybersecurity, connecting work across identity, vulnerability management, cloud, detection and response, governance, and resilience. That breadth lets you build long-term roadmaps and break down the silos that keep security, IT, and the business from working toward the same goals.

What you'll do

Practice contribution

• Serve as the Director's trusted partner on delivery, stepping in on client calls and engagement decisions when needed
• Act as engagement lead on complex or high-visibility work, setting direction for the consultants and engineers on your engagements
• Mentor and coach other consultants, review their deliverables, and help raise the quality bar across the practice
• Support scoping, level-of-effort estimates, and statements of work with the Director and sales team
• Build repeatable methods, templates, and standards so delivery scales beyond any one consultant
• Help shape TekStream's AI governance practice and other new offerings, including how we package them

Program strategy

• Build multi-year cybersecurity roadmaps that sequence initiatives across domains based on risk, dependencies, and business priorities
• Connect findings from assessments, tabletops, and implementations into a single program view for client leadership
• Break down silos between security, IT operations, infrastructure, cloud, and business teams by facilitating shared goals, ownership, and decisions
• Translate technical initiatives into business outcomes that executives can fund and track

Client delivery

• Lead stakeholder kickoffs, discovery sessions, and current-state assessments, and present findings to technical teams and executives
• Facilitate user story workshops, document requirements, and produce target-state designs that client or TekStream engineering teams can build from
• Oversee configuration requirements, build books, end-to-end workflow documentation, and SLA and exception handling processes
• Build operationalization plans with clear ownership, cadence, and evidence so programs keep running after the engagement ends
• Lead framework-based, custom, and targeted assessments, and turn findings into prioritized, achievable roadmaps
• Design and facilitate tabletop exercises for cyber incident and cloud disaster recovery scenarios, and deliver after-action reports
• Design and deliver training and knowledge transfer for operations, administration, and service management teams
• Provide advisory support through pilot deployments and post-go-live stabilization

Required qualifications

• 8+ years in cybersecurity, IT risk, or IT service management, with at least 4 years in a client-facing consulting or advisory role
• Broad knowledge across cybersecurity domains, including identity, vulnerability and exposure management, cloud security, detection and response, data protection, governance and risk, and resilience, and how they depend on each other
• Experience building multi-year security roadmaps or program strategies for client or internal leadership
• A track record of bringing siloed teams together around shared priorities and clear ownership
• Experience leading engagements end to end, including client relationships, scope management, and deliverable quality
• Experience mentoring or guiding other consultants or analysts, formally or informally
• Proven experience leading requirements workshops and writing user stories, acceptance criteria, and requirements that engineering teams build from
• Working knowledge of vulnerability management programs and the full vulnerability lifecycle, from detection to verified closure
• Experience with IT service management processes, including incident, change, and CMDB, from a process design perspective
• Hands‑on experience performing framework-based, custom, and targeted assessments, using frameworks such as NIST CSF or ISO 27001
• Experience writing operational documentation such as runbooks, build books, process flows, RACI matrices, and SLA definitions
• Strong facilitation skills with mixed audiences, from engineers to executives
• Clear, concise written communication

Preferred qualifications

• Experience with penetration testing or application security, such as secure SDLC, threat modeling, or application testing
• Experience with enterprise vulnerability management, patch management, and ITSM platforms, including the integrations between them
• Experience designing or facilitating tabletop exercises, particularly for cloud disaster recovery scenarios
• Familiarity with business impact analysis and business continuity planning
• Exposure to AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, or ISO/IEC 42005
• Experience delivering training or knowledge transfer to operations teams
• Certifications such as CISSP, CISM, CISA, CRISC, or ITIL 4 Foundation

What success looks like

• The Director can hand you a complex engagement and trust it will land
• Clients leave with a roadmap their security, IT, and business teams agree on and fund
• Teams that used to work in silos share priorities and hand off work cleanly
• Consultants on your engagements get better because they worked with you
• Engagements land on scope, budget, and timeline
• Clients finish engagements with programs their own teams can run, not documents that sit on a shelf
• Engineering teams build from your requirements without needing to come back for clarification
• Client executives trust your judgment and ask for you on follow‑on work
• You leave a visible mark on how TekStream packages and delivers advisory and AI governance work