Consultant or Senior Consultant
Full-Time
New Gloucester, ME or Remote
About the Role
We are looking for a motivated consultant or senior consultant to join our team in a client-facing role.
You will work with organizations across industries — financial services, healthcare, higher education, manufacturing/defense suppliers, and nonprofits — to strengthen their security posture, meet regulatory requirements, and prepare for future risks.
In this role, you will have the opportunity to work directly with clients, apply your expertise across multiple domains, and grow into a trusted advisor.
What You'll Do
-
Conduct cybersecurity assessments (e.g., NIST CSF, CIS, HIPAA, PCI, risk assessments).
-
Perform Microsoft 365 security configuration reviews.
-
Support clients with CMMC readiness, gap analysis, and remediation services.
-
Assist with IT audits, third-party/vendor risk reviews, and policy development.
-
Facilitate incident response tabletop exercises and security awareness training.
-
Provide advisory services as part of vCISO engagements.
We do not expect expertise in every area listed — a strong foundation and the ability to learn are what matter most.
What We're Looking For
-
Background in cybersecurity, IT risk, or audit with the ability to apply that knowledge in a client-facing consulting role.
-
Familiarity with security frameworks (NIST CSF, NIST 800-171/CMMC, CIS, HIPAA, etc.).
-
CMMC readiness and remediation experience is a strong plus — if you have worked with defense contractors or supported CMMC-related projects, that will set you apart.
-
Strong communication skills, especially for non-technical audiences.
-
Proficiency in Microsoft Office (Excel, Word, PowerPoint); GRC tools a plus.
-
Certifications (CISSP, CISA, CRISC, CMMC, etc.) are valued but not required — we’ll support you in obtaining one.
Why Join Us?
-
Collaborate with experienced consultants with deep corporate and industry backgrounds — you will learn directly from seasoned professionals.
-
Build expertise across multiple domains (audit, compliance, risk, cyber) while also working on repeatable
-
frameworks and assessments that deepen your skill set.
-
Be part of a boutique firm where your input matters and your work has visible impact on clients.
-
Leverage our established relationships and industry contacts to accelerate your professional growth.
