Senior Security Consultant

Insight Security; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Equity

Fully remote

Health, dental, and vision insurance

Unlimited PTO

Home office stipend

401(k) with company match

Job summary

Insight Security is seeking a Senior Security Consultant to lead client engagements, build security programs from the ground up, and help growing companies determine what good security looks like for them. You will own client relationships and steer projects from start to finish, across risk assessments, roadmaps, and compliance readiness.

You will guide clients through SOC 2, ISO 27001, and HIPAA processes, design security programs, and help mature their security posture over time.

Qualifications

• 7+ years of information security experience, including consulting or building security programs.
• Familiarity with SOC 2, ISO 27001, NIST CSF, and HIPAA frameworks.
• Proven ability to communicate security concepts to non-technical stakeholders.

Responsibilities

• Lead security assessments and gap analyses for diverse clients.
• Design and implement security programs tailored to client size and risk.
• Guide clients through compliance efforts like SOC 2, ISO 27001, and HIPAA.
• Develop policies and documentation that are practical and followed.
• Present findings to executives and boards in business-friendly terms.
• Build and maintain long-term client relationships and strategic roadmaps.
• Contribute to improving internal processes, methodologies, and offerings.

Skills

Security program design

Client relationship management

Cloud security

Security frameworks

Communication

Independent multi-client work

Job description

We're looking for a senior consultant who can lead client engagements, build security programs from the ground up, and help growing companies figure out what good security looks like for them.

As a Senior Security Consultant, you'll work directly with clients to assess their security posture, build programs, and help them mature over time. This isn't a role where you show up, write a report, and disappear. You'll take ownership of client relationships and see projects through from start to finish.

You'll work across a range of engagements: leading risk assessments, building security roadmaps, helping clients prepare for SOC 2 or other compliance frameworks, advising on security architecture, and sometimes stepping in as fractional security leadership. The work varies, and that's part of what makes it interesting.

We're a small team, so you'll have real influence over how we work and what we build. If you've been frustrated by the bureaucracy of larger consultancies or the narrow scope of in-house roles, this might be a good fit.

What you'll do

• Lead security assessments and gap analyses for clients across different industries and company stages
• Design and help implement security programs tailored to each client's size, risk profile, and business goals
• Guide clients through compliance efforts like SOC 2, ISO 27001, and HIPAA
• Develop policies, procedures, and documentation that people will actually follow
• Present findings and recommendations to executives and boards in clear, business-friendly terms
• Build long-term relationships with clients and help them navigate security decisions as their companies grow
• Contribute to improving our internal processes, methodologies, and service offerings

What we're looking for

• 7+ years of experience in information security, with significant time spent in consulting or building security programs
• Deep familiarity with security frameworks like SOC 2, ISO 27001, NIST CSF, and HIPAA
• Experience working with cloud environments (AWS, Azure, or GCP) and understanding cloud security principles
• Strong communication skills with the ability to explain technical concepts to non-technical audiences
• Comfort working independently and managing multiple client relationships at once
• A practical mindset that prioritizes what works over what's theoretically ideal

Nice to have

• Experience in a CISO or security leadership role
• Background in penetration testing or technical security assessments
• Experience working with startups or high-growth companies
• Relevant certifications (CISSP, CISM, etc.) are helpful but not required

What we offer

• Competitive salary and equity
• Fully remote work
• Health, dental, and vision insurance
• Unlimited PTO (and we actually use it)
• Home office stipend
• 401(k) with company match

We build security programs for growing companies.