Senior Security Consultant

Insight Security; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Fully remote work

Health, dental, and vision insurance

Unlimited PTO (and we actually use it)

Home office stipend

401(k) with company match

Résumé du poste

Insight Security is seeking a Senior Security Consultant to lead client engagements, build security programs from the ground up, and guide growing companies toward practical, scalable security posture.

You'll work directly with clients to assess their security posture, design tailored programs, and mature their security program over time. This role emphasizes ownership, independence, and clear communication with executives.

Qualifications

• 7+ years of experience in information security, with consulting or building security programs
• Familiarity with SOC 2, ISO 27001, NIST CSF, and HIPAA
• Experience with cloud environments (AWS, Azure, or GCP) and cloud security principles
• Strong communication skills and ability to explain technical concepts to non-technical audiences
• Comfort working independently and managing multiple client relationships

Responsabilités

• Lead security assessments and gap analyses for clients across different industries and stages
• Design and help implement security programs tailored to each client’s size and risk profile
• Guide clients through compliance efforts like SOC 2, ISO 27001, and HIPAA
• Develop policies, procedures, and documentation that people will actually follow
• Present findings and recommendations to executives and boards in clear, business-friendly terms
• Build long-term relationships with clients and help them navigate security decisions as their companies grow
• Contribute to improving our internal processes, methodologies, and service offerings

Connaissances

Security program development

Risk assessment

Security framework knowledge

Client engagement

Communication skills

Description du poste

We're looking for a senior consultant who can lead client engagements, build security programs from the ground up, and help growing companies figure out what good security looks like for them.

As a Senior Security Consultant, you'll work directly with clients to assess their security posture, build programs, and help them mature over time. This isn't a role where you show up, write a report, and disappear. You'll take ownership of client relationships and see projects through from start to finish.

You'll work across a range of engagements: leading risk assessments, building security roadmaps, helping clients prepare for SOC 2 or other compliance frameworks, advising on security architecture, and sometimes stepping in as fractional security leadership. The work varies, and that's part of what makes it interesting.

We're a small team, so you'll have real influence over how we work and what we build. If you've been frustrated by the bureaucracy of larger consultancies or the narrow scope of in-house roles, this might be a good fit.

What you'll do

• Lead security assessments and gap analyses for clients across different industries and company stages
• Design and help implement security programs tailored to each client's size, risk profile, and business goals
• Guide clients through compliance efforts like SOC 2, ISO 27001, and HIPAA
• Develop policies, procedures, and documentation that people will actually follow
• Present findings and recommendations to executives and boards in clear, business-friendly terms
• Build long-term relationships with clients and help them navigate security decisions as their companies grow
• Contribute to improving our internal processes, methodologies, and service offerings

What we're looking for

• 7+ years of experience in information security, with significant time spent in consulting or building security programs
• Deep familiarity with security frameworks like SOC 2, ISO 27001, NIST CSF, and HIPAA
• Experience working with cloud environments (AWS, Azure, or GCP) and understanding cloud security principles
• Strong communication skills with the ability to explain technical concepts to non-technical audiences
• Comfort working independently and managing multiple client relationships at once
• A practical mindset that prioritizes what works over what's theoretically ideal

Nice to have

• Experience in a CISO or security leadership role
• Background in penetration testing or technical security assessments
• Experience working with startups or high-growth companies
• Relevant certifications (CISSP, CISM, etc.) are helpful but not required

What we offer

• Competitive salary and equity
• Fully remote work
• Health, dental, and vision insurance
• Unlimited PTO (and we actually use it)
• Home office stipend
• 401(k) with company match

We build security programs for growing companies.