Cis Controls

Cis Controls Cybersecurity Jobs

4 jobs found

2d ago

Cybersecurity Analyst Level 1

Kotori Technologies, LLC Greenville, SC 🇺🇸 Remote

Greenville, SC

2d ago

$60k - $75k/yr Full time Application Support Business Systems Cis Controls

Apply Now

Job Description

Support client security environments in an MSP setting while building toward deeper assessment and compliance ownership across multiple customers.

Responsibilities

Monitor, support, and assist with managing client security environments across multiple customer networks
Participate in client calls for security implementations, ongoing support, remediation efforts, and compliance initiatives
Identify, document, and track security risks, vulnerabilities, remediation tasks, and control gaps
Perform basic security assessments and contribute to gap analysis for client environments
Assist with implementing security controls across endpoints, Microsoft 365, and network environments
Provide practical security guidance to clients, including hardening recommendations, MFA adoption, policy adherence, and secure configuration practices
Support implementation and management of cybersecurity frameworks such as CMMC, NIST SP 800-171, CIS Controls, and other standards required by clients or recognized in the industry
Assist with remediation tracking and help validate control effectiveness
Contribute to compliance documentation, procedural records, and evidence collection activities
Over time, develop the ability to lead security assessments and own compliance engagements across multiple clients
Support Tier 1 and Tier 2 technicians during high-volume periods, including common end-user issues such as printers, applications, networking, and system performance
Escalate service or project issues that cannot be completed within agreed service levels
Document internal processes and procedures related to assigned duties and responsibilities
Enter time, expenses, service work, and project work in ConnectWise as required
Work through project tickets and project phases in ConnectWise as assigned by a Project Manager
Complete assigned ConnectWise University training materials and blueprints to learn internal processes and workflows
Review cybersecurity publications and online resources to stay current on emerging security technologies, risks, and best practices

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (preferred)
Master’s degree preferred but not required
2 to 5 years of general IT experience preferred
1 to 2 years of cybersecurity experience preferred
Familiarity with CMMC, NIST SP 800-171, CIS Controls, or similar cybersecurity and compliance frameworks
Professional IT or cybersecurity certifications preferred, such as CompTIA Security+, ISC2, or other applicable industry-recognized certifications
CompTIA Security+ preferred, or required within 6 to 12 months if not already obtained
CCP certification preferred, or required within 6 to 12 months if not already obtained
Strong interpersonal skills, including communication, active listening, client service, and professional phone communication
Ability to diagnose and troubleshoot technical issues across common end-user, endpoint, application, and networking scenarios
Ability to multitask, adapt quickly to changing priorities, and work effectively in a fast-moving MSP environment
Technical awareness and judgment to match resources to technical issues and client needs
Understanding of IT support tools, service delivery processes, and how technology is used to provide managed IT services
Service awareness of key IT services and the ability to understand how IT relates to a client’s business strategy and goals
Strong documentation and typing skills to ensure quick and accurate entry of service request details, time entries, and project updates
Self-motivated, team-oriented, and able to communicate effectively with clients, technicians, project managers, and internal leadership

Tools & Technologies

Microsoft 365
CMMC
NIST SP 800-171
CIS Controls
ConnectWise
ConnectWise University
CompTIA Security+
ISC2
MFA

Benefits

401(k) matching
Dental insurance
Employee assistance program
Health insurance
Health savings account
Life insurance
Paid time off
Retirement plan
Vision insurance

Remote Work

Work from home (remote)
May require occasional travel to client sites

Location

South Carolina (remote)

Compensation

USD 60,000 - 75,000 per year

View full job page →

1mo ago

Principal Information Security Analyst

FM Johnston, RI

Johnston, RI

1mo ago Closed

$121k - $173k/yr Full time Senior Cis Controls Compliance

This position is no longer accepting applications (closed Aug 22, 2026).

Job Description

Lead FM's global cybersecurity regulatory compliance program by assessing requirements and translating them into actionable controls while collaborating across security, technology, risk, legal, and business teams to ensure regulatory alignment.

Responsibilities

Oversee the full spectrum of the cybersecurity regulatory compliance function, including governance, processes, tools, and reporting.
Coordinate responses to regulatory examinations, client security questionnaires, and other external information requests; work with Information Security, IT, Risk, Legal, and business stakeholders to collect, validate, and deliver accurate, audit-ready responses aligned to FM's control environment.
Monitor global cybersecurity regulations, standards, and guidance; conduct impact assessments to determine applicability and required changes to FM's controls.
Lead regulatory gap analyses and control evaluations; partner with technical and business teams to define remediation actions, track progress, validate closures, and escalate risks as needed.
Develop and maintain metrics, dashboards, and reporting on compliance posture, risk, and trends; provide concise updates to senior leadership and governance committees.
Serve as a trusted advisor on regulatory and compliance matters across IT, security, and business units; guide control design, risk treatment, and regulatory alignment to FM’s risk appetite.
Identify opportunities to improve program efficiency, automation, and maturity; implement leading practices in regulatory compliance, controls management, and assurance.
Lead complex initiatives and direct cross-functional contributors; promote accountability, transparency, and continuous improvement.

Requirements

Minimum 8 years in cybersecurity, information security, cyber risk, audit, or regulatory compliance; global experience preferred.
Experience applying frameworks such as NIST CSF 2.0 and CIS v8.1, including mapping controls to regulations and using a risk-based approach to solve problems.
Hands-on experience responding to regulatory exams, audits, or client security assessments, including evidence collection, control mapping, and response coordination.
Experience supporting IT general controls (ITGC) or cybersecurity control audits; understanding audit expectations, testing approaches, and evidence requirements.
Familiarity with global regulatory requirements across regions (APAC, EU, US) and regulatory bodies like APRA, IRDAI, OFSI, MAS.
Proven ability to identify control gaps, assess compliance, and support remediation tracking.
Strong problem-solving and analytical abilities to interpret regulatory requirements and apply them in a practical, risk-based manner.
Ability to develop and maintain clear, accurate, audit-ready control documentation and supporting evidence.
Outstanding stakeholder management and collaboration across Information Security & Risk Management, IT, Risk, Legal, and business teams.
Excellent verbal and written communication skills; translate technical security concepts into clear responses for regulators, clients, and business stakeholders.
Strong organizational and time management skills; manage multiple concurrent requests and deadlines.
Ability to work independently, prioritize competing demands, and deliver high-quality outputs with minimal supervision.
Bachelor's degree in information security, computer science, information technology, or a related field; consideration given to relevant experience.
Certifications such as CISA or CISM are preferred.

Technologies

Technologies used: NIST CSF 2.0, CIS v8.1.

Benefits

Incentive plan
Medical, dental, and vision insurance
Life and disability insurance
Well-being programs
401(k) and pension plan
Career development opportunities
Tuition reimbursement
Flexible work
Time off, including vacation and sick time

Schedule & Location

On-site work is required one day per week at the Corporate Headquarters, with flexibility to be on-site as needed by business demands.
Relocation is not offered for this position.

View full job page →

1mo ago

Cybersecurity Consultant

Elteni, LLC New Hyde Park, NY

New Hyde Park, NY

1mo ago Closed

$90k - $140k/yr Full time Senior Ai Governance Azure

This position is no longer accepting applications (closed Aug 16, 2026).

Job Description

As a senior cybersecurity consultant at Elteni, lead client engagements from planning through delivery, focusing on cloud security, identity and data protection, governance, risk and compliance, and AI governance, with opportunities to shape methodologies and service offerings.

Responsibilities

Own end-to-end cybersecurity consulting engagements from kickoff to final delivery with minimal supervision.
Conduct security assessments across Microsoft 365, Azure, AWS, Google Cloud Platform (GCP), Google Workspace, and other SaaS environments.
Assess identity, cloud, endpoint, collaboration, email, and data protection controls and provide practical, risk-based recommendations.
Perform cybersecurity risk assessments using NIST CSF 2.0, CIS Controls, ISO 27001, COBIT, and applicable regulatory requirements.
Create and maintain security program documentation, including policies, standards, incident response plans, business continuity plans, AI governance documentation, and related artifacts.
Lead third-party risk management and vendor security assessments.
Deliver cybersecurity awareness training.
Coordinate cybersecurity tabletop exercises.
Translate technical findings into business risk insights for executives.
Advise clients on cloud security architecture, governance, and security best practices.
Proactively communicate emerging risks, trends, and guidance before issues escalate.
Help clients prioritize remediation based on business impact and risk.
Participate in AI security and governance assessments.
Contribute to Elteni methodologies, templates, automation, and new service offerings.
Mentor junior consultants and review deliverables.
Stay current on emerging technologies, AI, cloud security, and evolving threats.

Requirements

Consulting experience: 6 years (Required)
Cybersecurity assessment experience: 6 years (Required)
Policy development experience: 6 years (Required)
Third-party risk management (TRPM) experience: 6 years (Required)

Technologies

Microsoft 365, Azure, AWS, Google Cloud Platform (GCP), Google Workspace
Entra ID, Conditional Access, Exchange Online, SharePoint Online, Teams, Intune
Microsoft Defender
NIST CSF 2.0, CIS Controls, ISO 27001, COBIT

Benefits

Competitive compensation
Medical, dental, and vision insurance
401(k) with company match
Flexible hybrid and remote work options
Generous paid time off and company holidays
Professional development and certification support
Collaborative, entrepreneurial culture
Flexible spending account
Health savings account
Life insurance
Parental leave
Professional development assistance
Employee discounts

What Success Looks Like

Independently lead client engagements from kickoff to executive presentation.
Execute Microsoft 365, Azure, cloud, and SaaS assessments with minimal guidance.
Become a trusted advisor that clients rely on.
Produce executive-ready reports that require minimal review.
Apply cybersecurity frameworks to real business environments.
Balance deep technical work with business and regulatory considerations.
Mentor junior consultants and improve overall practice quality.
Continue expanding knowledge in cloud security, AI, identity, and emerging threats.

Preferred Certifications

CISSP
CISM
CISA
CCSP
Microsoft Security Certifications
AWS Certified Security - Specialty
Google Professional Cloud Security Engineer

View full job page →

1mo ago

Cybersecurity Consultant-Japanese Bilingual

PASONA N A, INC. New York, NY

New York, NY

1mo ago Closed

$120k - $150k/yr Full time Cis Controls Cloud Platforms Cmmc Controls

This position is no longer accepting applications (closed Aug 9, 2026).

Job Description

The Cybersecurity Consultant role supports Japanese multinational organizations operating in North America by assessing cyber risk, strengthening governance, and shaping strategic roadmaps. The position may function as a Virtual Chief Information Security Officer for select clients.

Key Responsibilities

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps that align with organizational objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity initiatives
Conduct cybersecurity risk assessments and control evaluations
Perform readiness assessments and gap analyses against frameworks and regulatory requirements such as NIST CSF, ISO 27001/27002, NYDFS Part 500, HIPAA Security Rule, CMMC, SOC 2, and CIS Controls
Develop remediation plans and implementation recommendations
Serve as a trusted cybersecurity advisor for organizations without dedicated security leadership
Participate in executive meetings and annual cybersecurity program reviews
Support governance and strategic decision-making processes
Review and recommend target-state architectures across IAM, SSO, MFA, Network Security, Endpoint Protection, Cloud Security, and Data Protection & DLP
Align cybersecurity programs with modernization and digital transformation initiatives
Provide executive-level post-incident guidance and recommendations
Facilitate root-cause analyses and lessons-learned sessions
Assist with regulatory notification considerations and remediation planning
Build long-term trusted relationships with executive stakeholders
Present findings and recommendations to senior leadership teams and boards
Coordinate with delivery, engineering, and customer success teams to ensure effective execution of advisory recommendations
Contribute to methodology development, service innovation, and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and cybersecurity awareness programs

Required Qualifications

Minimum 10 years of experience in cybersecurity, information risk management, IT governance, security consulting, or related advisory disciplines
Minimum 5 years in a senior consulting, cybersecurity leadership, risk advisory, governance, or Virtual CISO role
Experience advising executive stakeholders including CIOs, CISOs, Boards, Audit Committees, and Executive Leadership Teams
Working knowledge of NIST CSF
Working knowledge of ISO 27001/27002
Working knowledge of NYDFS Part 500
Working knowledge of HIPAA Security Rule
Working knowledge of CMMC
Working knowledge of CIS Controls
Understanding of enterprise cybersecurity architecture and technology domains, including IAM, SSO, MFA
Cloud Security experience (AWS, Azure, Microsoft 365)
Network Security, Endpoint Security
Vulnerability Management and Data Protection

Technologies

AWS
Azure
Microsoft 365
NIST Cybersecurity Framework (CSF)
ISO 27001/27002
NYDFS Part 500
HIPAA Security Rule
CMMC
CIS Controls
SOC 2
Identity and Access Management (IAM)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Cloud Security
Data Protection
Data Loss Prevention (DLP)
Vulnerability Management
Network Security
Endpoint Security

Benefits

Benefits package
Visa and relocation support

Location

New York, NY (Hybrid)
Hybrid work arrangement with approximately 2–3 days per week in the office
Periodic travel within the United States for customer engagements, with occasional international travel as needed

Language Requirements

Japanese: Native or Business Professional Proficiency (Required)
English: Business Professional Proficiency (Strongly Preferred)

Position Overview

We seek an experienced Senior Cybersecurity Consultant to join a growing advisory practice supporting Japanese multinational enterprises across North America. The role acts as a trusted adviser to executive leadership, helping clients assess risk, fortify governance programs, enhance regulatory readiness, and build strategic roadmaps. The successful candidate will engage directly with CIOs, CISOs, IT Directors, General Managers, Executive Committees, and Board Members to deliver actionable recommendations that align security initiatives with business goals. The ideal candidate combines business acumen with deep cybersecurity expertise, regulatory knowledge, and strong communication skills. This position may also function as a Virtual CISO for select engagements.

Key Responsibilities (Expanded)

Lead strategic cybersecurity consulting engagements for enterprise clients
Develop multi-year roadmaps aligned with objectives and risk tolerance
Advise executive leadership on governance, risk management, and program maturity
Conduct risk assessments and control evaluations
Perform readiness and gap analyses against leading frameworks and regulations
Develop remediation plans and implementation recommendations
Act as a trusted advisor for organizations lacking security leadership
Participate in executive meetings and annual program reviews
Support governance and strategic decision-making
Review target-state security architectures across IAM, SSO, MFA, and related domains
Align programs with modernization and digital transformation
Provide post-incident guidance and root-cause analysis facilitation
Assist with regulatory notification considerations and remediation planning
Build long-term executive relationships and present findings to boards
Coordinate with delivery, engineering, and customer success teams for execution
Contribute to methodology development and thought leadership
Mentor junior consultants and support professional development
Participate in customer workshops, industry events, and awareness programs

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, or related field
Master's degree preferred

Certifications

CISSP
CISM
CISA
CRISC
CGEIT
Equivalent cybersecurity certification

Preferred Qualifications

Experience with Japanese multinational corporations in North America
Background in financial services, manufacturing, insurance, telecommunications, or regulated industries
Experience supporting governance, risk management, internal controls, and compliance programs
Familiarity with security operations, incident response, threat intelligence, cloud security, or security architecture
Cloud certifications such as AWS, Azure, or Microsoft Security
demonstrated thought leadership through publications or industry involvement

How to Apply

Email your resume to xjiang@pasona.com

View full job page →

Cis Controls Cybersecurity Jobs

Cybersecurity Analyst Level 1

Principal Information Security Analyst

Cybersecurity Consultant

Cybersecurity Consultant-Japanese Bilingual

Get Cis Controls Cybersecurity Jobs alerts