Security Strategy Consultant

Bird Rock Systems, Inc; San Diego (CA); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

Unlimited Paid Time Off

Paid Family Leave Benefits

Flexible Spending Accounts

Pet Insurance

Employee Assistance Program

Life & AD&D Insurance

Wellness Reimbursement

Cell Phone Reimbursement

Job summary

Bird Rock Systems, Inc. seeks a Security Strategy Consultant to act as a trusted advisor, strengthening customers' cybersecurity programs and aligning investments with business goals.

You will assess current posture, develop roadmaps, establish governance, and drive program maturity in collaboration with Bird Rock Systems leadership and client stakeholders. The role emphasizes advisory, business alignment, and leadership development, with opportunities to expand into vCISO responsibilities as

Qualifications

• 4-7 years of experience in cybersecurity, information security, risk management, IT leadership, or related field.
• Experience conducting security assessments and identifying security risks.
• Familiarity with CIS Controls, NIST CSF, HIPAA, PCI-DSS, and SOC 2.

Responsibilities

• Conduct security maturity assessments and identify risks, gaps, and improvement opportunities.
• Develop practical, achievable security roadmaps and governance programs.
• Translate findings into business-focused recommendations for executives.
• Support customer growth through advisory services and opportunity development.
• Collaborate with stakeholders and leadership to drive security outcomes.

Skills

Cybersecurity experience

Security assessments

CIS Controls

NIST CSF

HIPAA

PCI-DSS

SOC 2

Job description

Security Strategy Consultant

• Regular in-person collaboration is encouraged to support mentorship, professional development, team culture, and delivery excellence.
• Can be called into our San Diego office at managers discretion.

Location

• Must reside in Southern California
• Regular in-person collaboration is encouraged to support mentorship, professional development, team culture, and delivery excellence.
• Can be called into our San Diego office at managers discretion.

Why Bird Rock Systems

At Bird Rock Systems, we take pride in being named one of the Inc. 5000 Fastest Growing Private Companies. Our dynamic journey to success is fueled by a team of passionate individuals who thrive in a fast-paced environment. We're more than a workplace; we're a community of fun-loving people dedicated to excellence.

What Sets Us Apart

• Best Workplace Awards:

Bird Rock Systems Is Proud To Be Recognized For Our Commitment To Fostering a Positive, Collaborative, And Innovative Culture. Our Honors Include

• Inc.’s Best Workplaces
• San Diego Business Journal’s Best Places to Work
• San Diego SHRM Workplace Excellence Award
• San Diego Tribune Top Workplaces

• Fast-Paced Growth: As an Inc. 5000 honoree, we're committed to driving innovation and pushing boundaries. Join us to be part of a dynamic and ever-evolving company.
• Vibrant Company Culture: We believe in creating an environment where work feels like fun. Our team is more than colleagues – we're friends who collaborate, support, and celebrate together.
• Core Values: Our values define us. Loyalty, work/life balance, kaizen (continuous improvement), unwavering integrity, exceptional customer service, and giving back to our community are the cornerstones of Bird Rock Systems.

Your Opportunity

At Bird Rock Systems, you're not just an employee – you're an essential part of our growth story. Join our team of driven professionals who embrace challenges, value camaraderie, and thrive on making a difference. If you're ready to work in an exciting atmosphere that blends passion, innovation, and purpose, we

Position Summary

The Security Strategy Consultant serves as a trusted advisor to our customers seeking to strengthen their cybersecurity programs, reduce business risk, and align security investments with organizational goals. Working closely with Bird Rock Systems security leaders and vCISOs, this role helps customers assess their current security posture, develop strategic roadmaps, establish governance practices, and improve security program maturity.

This role is designed for cybersecurity professionals who possess a strong foundation and are ready to accelerate their growth into business advisory, strategic consulting, and future security leadership positions. Success requires intellectual curiosity, strong communication skills, sound judgment, and a genuine desire to continuously learn and grow.

A responsibility of this role is developing trusted relationships with customer stakeholders. Through assessments, advisory engagements, and roadmap development, the Security Strategy Consultant identifies opportunities where customers can improve their security maturity and business outcomes. These opportunities translate into remediation projects, implementation services, compliance initiatives, cloud engagements, privacy services, or Team-as-a-Service solutions delivered by Bird Rock Systems.

This role sits at the intersection of customer success, strategic advisory, and business growth by helping clients achieve meaningful outcomes while identifying opportunities for Bird Rock Systems to provide additional value.

Success is measured by customer outcomes, security maturity improvements, executive trust, relationship development, service opportunity creation, and professional growth.

Ideal Candidate

The ideal candidate has moved beyond wanting to be the smartest person in the room and is interested in becoming a trusted business advisor.

They Are

• Curious and eager to learn.
• Comfortable receiving coaching and feedback.
• Motivated by personal and professional growth.
• Excited to develop executive communication skills.
• Interested in understanding how businesses operate and make decisions.
• Willing to pursue challenges that stretch their capabilities.
• Passionate about building long‑term customer relationships.
• Interested in developing into a future security leadership role.

What You Bring

Required

• 4-7 years of experience in cybersecurity, information security, risk management, IT leadership, or a related field.
• Experience conducting security assessments and identifying security risks.
• Familiarity with cybersecurity frameworks such as:
• CIS Controls
• NIST Cybersecurity Framework
• HIPAA
• PCI‑DSS
• SOC 2
• Experience communicating with technical and non‑technical stakeholders.
• Strong written, presentation, and interpersonal communication skills.
• Ability to manage multiple priorities and customer engagements simultaneously.

Preferred

• Consulting or customer‑-facing experience.
• Exposure to governance, risk, and compliance initiatives.
• Experience supporting security program development.
• Experience participating in executive or leadership‑level customer meetings.
• Relevant industry certifications.

Key Responsibilities

Security Advisory Program

• Conduct security maturity assessments using industry‑recognized frameworks.
• Identify risks, gaps, and opportunities for improvement.
• Assist customers in developing practical and achievable security roadmaps.
• Support the development of security policies, standards, processes, and governance programs.
• Help organizations establish sustainable security practices aligned with business objectives.
• Track progress against roadmap initiatives and improvement plans.

Risk, Compliance & Governance

• Facilitate risk discussions with customer stakeholders.
• Assist customers in identifying and prioritizing remediation activities.
• Support regulatory and compliance readiness efforts.
• Help establish security governance structures and reporting mechanisms.
• Translate technical findings into business‑focused recommendations.
• Prepare executive‑level reports and presentations.

Executive Communication & Relationship Building

• Participate in recurring customer advisory meetings.
• Develop trusted relationships across customer organizations.
• Present findings, recommendations, and roadmap updates to stakeholders.
• Facilitate discussions that align security priorities with business objectives.
• Build credibility through thoughtful recommendations and reliable follow‑through.
• Serve as a trusted advisor who helps customers make informed security decisions.

Customer Growth & Strategic Opportunity Development

• Develop a deep understanding of customer business priorities, challenges, and goals.
• Identify opportunities where Bird Rock Systems can provide additional value.
• Translate roadmap recommendations into actionable initiatives and projects.
• Recognize opportunities for:
• Security remediation engagements
• Compliance initiatives
• Cloud transformation and optimization services
• Privacy and governance projects
• Team‑as‑a‑Service engagements
• Ongoing advisory services
• Partner with account management and delivery teams to progress identified opportunities.
• Help customers understand the practical path from strategy to execution.
• Contribute to customer retention and organic account growth through trusted relationships and consistent value delivery.

Continuous Learning & Leadership Development

• Actively pursue opportunities to expand business, leadership, and security expertise.
• Participate in mentorship, coaching, and professional development programs.
• Continuously improve communication, facilitation, and advisory skills.
• Share lessons learned and best practices with team members.
• Contribute to the evolution of Bird Rock Systems security services and methodologies.
• Develop the judgment, business acumen, and leadership capabilities required for future vCISO responsibilities.

The 90-Day

Within the first 90 days, the Security Strategy Consultant is expected to:

• Successfully complete multiple customer security assessments.
• Develop customer‑facing reports and executive‑ready recommendations.
• Participate in client governance and advisory meetings.
• Build strong working relationships with assigned customer stakeholders.
• Identify and document meaningful security improvement initiatives.
• Contribute to opportunities that align customer needs with Bird Rock Systems services.
• Demonstrate a commitment to ongoing growth through coaching, feedback, and expanding responsibilities.

Win What Success Looks Like

What Success Looks Like

Successful Security Strategy Consultants

• Become trusted advisors to customer leadership teams.
• Help organizations make better security and business decisions.
• Consistently identify opportunities to improve customer outcomes.
• Transform recommendations into tangible initiatives and projects.
• Build long‑term customer relationships founded on credibility and trust.
• Continuously expand their skills, responsibilities, and influence.
• Develop into future security leaders and strategic advisors.

Professional Growth Mindset

At Bird Rock Systems, we believe meaningful career growth happens just beyond your current comfort zone. We seek professionals who actively pursue challenges, welcome feedback, embrace continuous improvement, and view professional development as a lifelong journey.

This role is designed as a stepping stone toward greater responsibilities. If you are motivated by learning, building trusted relationships, helping customers succeed, and developing into a future security leader, we encourage you to apply.

Compensation

• Estimated Pay Range: 110,000-$135,000 Base Salary + Performance Incentive
• The above represents the expected pay range for this job requisition. Ultimately, in determining pay, we’ll consider location, experience, and other job‑related factors.

Benefits

At Bird Rock Systems, we make sure you have the support and resources to leverage and develop your skills, secure your financial future, and take care of your health and well‑being. Bird Rock Systems continually seeks to provide a workplace where everyone can be their authentic self. Through Bird Rock Systems competitive benefits offerings and various training and development opportunities, we have you covered with our Benefits Program which includes:

• Medical, Dental, and Vision Insurance
• Unlimited Paid Time Off
• Paid Family Leave Benefits
• Flexible Spending Accounts
• Pet Insurance
• Employee Assistance Program
• 100% Employer-Paid Life & AD&D Insurance, Short- and Long‑Term Disability Insurance
• Monthly Wellness Reimbursement
• Cell Phone Reimbursement