Principal Cybersecurity Consultant

ACA Group; Massachusetts; On-site; USD 150,000 - 190,000; Full time

Job summary

ACA Group in Boston is seeking a Principal Cybersecurity Consultant to lead advisory engagements, deliver risk assessments, and drive client retention and growth. You will develop written deliverables and present findings to executives while guiding security program improvements and risk mitigation.

The role includes mentoring junior staff, managing a book of business, and contributing to business development initiatives, with up to 40% travel.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field; or five years of relevant experience
• Minimum of five years of experience in information security, risk management, information technology, or a related discipline
• Strong technical knowledge of information security architectures across network, application, cloud, and mobility domains
• Hands-on expertise in at least one technology domain such as infrastructure, software development, or information security
• Ability to communicate effectively with both technical and non-technical stakeholders
• Experience developing and presenting client deliverables and recommendations

Responsibilities

• Lead client engagements from planning through delivery
• Leverage Aponix methodologies to conduct assessments
• Develop written deliverables including reports, policies, and guidelines
• Present findings to technical and non-technical stakeholders
• Provide expert guidance on risks and mitigations
• Own and manage client relationships with renewals and growth
• Manage a book of business with revenue and renewal goals
• Mentor and train junior team members
• Participate in special projects and product development
• Identify opportunities to improve client programs

Skills

Client leadership

Risk assessment

Engagement management

Cybersecurity

Stakeholder communication

Mentoring

Business development

Education

Bachelor's degree or 5 years experience

Information security fundamentals

Tools

None

Job description

Select how often (in days) to receive an alert:

Principal Cybersecurity Consultant

Date: Oct 22, 2026

Company: ACA Group

The Opportunity: The Principal Consultant, Advisory Consulting Services, is responsible for delivering exceptional client service that drives client retention, account growth, and new business development for ACA Aponix® cybersecurity risk consulting services. This individual will manage a portfolio of client engagements, develop trusted advisor relationships, identify opportunities to enhance client cybersecurity programs, and contribute to revenue, profitability, and renewal objectives while supporting the continued growth of the advisory practice.

What you'll do:

• Lead client engagements from planning through delivery, including client meetings, findings discussions, presentations, and expectation management
• Leverage Aponix proprietary risk assessment methodologies and tools to conduct cybersecurity and risk assessments
• Develop written deliverables including assessment reports, policies, standards, and risk program guidelines
• Present findings and recommendations to technical and non-technical stakeholders at all organizational levels
• Provide expert guidance on cybersecurity risks, security improvements, and risk mitigation strategies
• Own and manage client relationships with a focus on renewals, account growth, and client satisfaction
• Manage a book of business with associated revenue, profitability, and renewal goals
• Mentor, train, evaluate, and provide guidance to junior team members
• Participate in special projects and product development initiatives that support business growth and client service excellence
• Identify opportunities to improve client programs and engagement outcomes

To qualify for the role you must have:

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field; alternatively, five (5) years of relevant information security, information technology, or development experience
• Minimum of five (5) years of experience in information security, risk management, information technology, or a related discipline
• Strong technical knowledge of information security architectures across network, application, cloud, and mobility domains
• Hands-on expertise in at least one technology domain such as infrastructure, software development, or information security
• Ability to communicate effectively with both technical and non-technical stakeholders
• Experience developing and presenting client deliverables and recommendations

Ideally, you'll also have:

• Experience managing client relationships and growing existing accounts
• Experience leading cybersecurity consulting or risk assessment engagements
• Experience mentoring and developing junior consultantsKnowledge of cybersecurity frameworks, risk management practices, and security program development

Skills and attributes for success:

• Ability to translate technical findings into business-focused recommendations
• Demonstrated professional integrity
• Dependable, flexible, and adaptable to changing client needs and business priorities
• Ability to exercise sound judgment and make independent decisions
• Ability to thrive in a fast-paced, collaborative environment
• Strong relationship-building skills with clients and colleagues
• Highly motivated and proactive in professional development and continuous learning
• Dedicated to delivering high-quality client service and maintaining ACA's standards of excellence
• Strong organizational and problem-solving skills with exceptional attention to detail
• Excellent verbal and written communication skills
• Proficiency with Microsoft Office applications and Adobe Acrobat
• Ability and willingness to travel up to 40%