Alvarez & Marsal supports a collaborative, high-accountability team that brings national security and cybersecurity governance to life through modern architectures and enterprise-grade solutions. You will work in an environment built on openness, entrepreneurial thinking, mutual respect, and high-quality standards, with advancement opportunities that recognize effort and results. Performance growth is tied to contribution, with direct access to senior leaders for coaching and mentorship.
Location: New York, NY (onsite)
Travel: Up to 20% to client sites and security assessment locations
Salary: USD 100,000 - 140,000 per year
Experience: 6+ years
What you’ll do
Lead national security and cybersecurity governance advisory, oversight, and audit engagements. The work includes FDI national security reviews, export and technology controls, and CMMC, with a focus on designing and validating Zero Trust and Identity and Access Management (IAM) capabilities. You will also contribute to integrating security technologies and controls aligned to federal and regulatory security standards.
- Lead cross-functional project teams delivering advisory, oversight, and audit work across FDI national security reviews, export and technology controls, and CMMC; develop project plans, define milestones, and manage resource allocation using enterprise project management methods and tools.
- Design and implement Zero Trust architecture frameworks and IAM solutions, including PAM, RBAC, and continuous authentication mechanisms; collaborate with client security personnel to document controls for distributed big data systems with least-privilege access principles.
- Conduct enterprise security assessments to validate administrative, technical, and physical safeguards, emphasizing identity governance, access management, and Zero Trust implementation; assess maturity against NIST 800-53, ISO 27001, and CMMC.
- Run comprehensive application and software assessments by reviewing identity and access flows, interviewing across DevSecOps teams, evaluating IAM and Zero Trust integration points, overseeing static and dynamic code analysis, managing network penetration testing, and producing detailed technical reports for senior counsel, executives, and national security officials.
- Analyze penetration testing outcomes with emphasis on identity-related vulnerabilities and access control weaknesses; create remediation roadmaps aligned to enterprise architecture standards.
- Implement and integrate security technologies such as SIEM, IGA, and PAM to support automated compliance monitoring and security oversight.
- Maintain project management artifacts including work breakdown structures, risk registers, and resource allocation plans; establish project governance and reporting to ensure alignment with organizational objectives and regulatory requirements.
- Support organizations, investors, and counsel in identifying, assessing, and reducing national security risk through modern security architectures, embedding regulatory requirements into business systems and processes.
- Enable transparency between companies and regulators by leveraging data analytics, automated compliance monitoring, and advanced security tooling.
- Serve as fiduciary to U.S. government agencies as either a third-party monitor or third-party auditor, ensuring adherence to federal security standards and frameworks.
What you bring
- 6+ years of experience with technology companies delivering controlled technology nationally and internationally.
- Experience with NIST CSF and one or more of: NIST SP 800-53, NIST SP 800-171, NIST SP 800-218, NIST SP 800-161, and/or ISO 27001.
- Cybersecurity governance experience, including work with NIST CSF, NIST 800-171 and -53, CIS-18 IG1 and ISO 27001.
- Proficiency in at least one programming language (for example, Python or Java).
- Background in network and cloud-based platforms (for example, GCP, AWS, Kubernetes).
- Familiarity with containerization technologies and deployments.
- Experience with big data platforms (on premise and cloud).
- Ability to obtain a USG security clearance.
- One or more relevant certifications such as CompTIA Security+, CompTIA CySA+, CompTIA CASP+, CISSP, CISM, CISA, ISO 27001, or comparable certifications.
Benefits
- Healthcare plans
- Flexible spending and savings accounts
- Life, AD&D, and disability coverages
- 401(k) retirement plan
- Discretionary contribution to their 401(k) from Alvarez & Marsal (provided eligibility requirements are met)
- Paid time off including vacation and personal days
- Seventy-two (72) hours of sick time (prorated for part time employees)
- Ten federal holidays
- One floating holiday
- Parental leave
Salary range: $100,000 - $140,000 annually, dependent on factors including education, experience, skills, and geography. A discretionary bonus program is offered based on multiple factors, including individual and firm performance.
Lie detector tests: Alvarez & Marsal does not require or administer lie detector tests as a condition of employment or continued employment. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.
