Senior Cybersecurity Governance Lead - Zero Trust & IAM

Alvarez & Marsal; Chicago (IL); On-site; USD 100,000 - 140,000; Full time

Job summary

Alvarez & Marsal is seeking a seasoned security governance professional to lead national security risk analysis and compliance engagements. You will implement Zero Trust architectures, manage IAM controls, and perform comprehensive security assessments across applications and data centers.

The role requires strong knowledge of NIST frameworks, ISO 27001, and related controls. Candidates should have advanced security certifications and experience with cloud platforms (GCP/AWS) and containerized

Qualifications

• Bachelor's degree in a related field is required.
• Experience with NIST CSF, NIST SP 800-53, SP 800-171, SP 800-218, SP 800-161, and ISO 27001.

Responsibilities

• Lead cross-functional advisory, oversight, and audit projects in national security reviews and related domains.
• Design and implement Zero Trust architecture and IAM solutions with strong access controls.
• Conduct enterprise security assessments focusing on identity governance and access management.
• Review architectures, interview DevSecOps teams, evaluate IAM integration points, and oversee code analysis.

Skills

NIST CSF

NIST SP 800-53

NIST SP 800-171

ISO 27001

Programming (Python/Java)

Cloud platforms (GCP/AWS)

Zero Trust / IAM

Penetration testing

Security auditing

Education

Bachelor's degree in Computer Science/Information Security or related field

Industry certifications (CISSP/CISM/CISA/CompTIA Security+)

Tools

SIEM

Kubernetes

Docker

Job description

Alvarez & Marsal is seeking a seasoned security governance professional to lead national security risk analysis and compliance engagements. You will implement Zero Trust architectures, manage IAM controls, and perform comprehensive security assessments across applications and data centers.

The role requires strong knowledge of NIST frameworks, ISO 27001, and related controls. Candidates should have advanced security certifications and experience with cloud platforms (GCP/AWS) and containerized