{"id":730758,"url":"https://alion.io/job/electric-mind-senior-consultant-cyber-security","title":"Senior Consultant - Cyber Security","company":{"id":58136,"name":"Electric Mind","domain":"electricmind.com","url":"https://alion.io/company/electric-mind","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":133000,"max_usd":257000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"Wiz","optional":false},{"name":"Azure","optional":true},{"name":"BeyondTrust","optional":true},{"name":"Crowdstrike","optional":true},{"name":"CVSS","optional":true},{"name":"CyberArk","optional":true},{"name":"Delinea","optional":true},{"name":"EPSS","optional":true},{"name":"GDPR","optional":true},{"name":"Incident Management","optional":true},{"name":"KEV","optional":true},{"name":"Linux","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Nessus","optional":true},{"name":"Okta","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-06-18T19:10:52Z","employer_posted_date":"2026-06-18","last_verified_at":"2026-10-21T13:04:32Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":124},"description":"About the Role\nWe advise large U.S. banks, broker-dealers, and insurers on the most consequential\ncyber security problems they face - the ones that show up in MRAs, MRIAs, Consent Orders.\nAs a Senior Consultant on our Cyber & Regulatory Remediation team, you will lead client-facing workstreams that translate regulator findings into defensible, executable remediation plans, and then drive those plans to closure alongside CISO, Risk, and Audit leadership.\nThis is not a generic GRC role. You will own the substance: writing remediation roadmaps that an OCC, FRB, or NY DFS examiner will accept, hardening the controls that fail under exam, and personally pushing technical workstreams - incident response, vulnerability and patch management, and identity - across the finish line.\nWhat You'll Do\n Lead regulatory remediation programs. Translate MRAs, MRIAs, Matters Requiring Attention, Consent Orders, and 500.17 (NY DFS) cybersecurity event notifications into prioritized remediation plans with defensible milestones, evidence requirements, and validation criteria.\nRun point with examiners and internal audit. Prepare clients for FRB, OCC, FDIC, NY DFS, SEC, and FFIEC exams and continuous-monitoring touchpoints. Draft response letters, walkthroughs, and evidence packages. Defend the work.\nDrive technical remediation, not just documentation. Partner with client CISO, IT Risk, Infrastructure, and IAM teams to actually close findings - not just status-report them. Push for engineering outcomes, not slideware.\nRun cyber incident response engagements. Lead or co-lead client-side IR for material events: containment strategy, forensic coordination, regulator and law-enforcement notification timing, executive and board communications, and post-incident remediation.\n Strengthen vulnerability and patch management programs. Assess current-state VM/patch operations, design risk-based SLAs, build exception governance, and operationalize tooling (Qualys, Tenable, Rapid7, Wiz, ServiceNow VR) so remediation actually happens at SLA.\nLead IAM remediation workstreams. Drive privileged access management, joiner-mover-leaver, recertification, segregation-of-duties, and identity governance improvements. Reduce standing privilege and clean up the access debt regulators flag.\nCoach the team. Mentor analysts and consultants. Review their deliverables. Raise the bar on what “good” looks like in a remediation deliverable.\n Grow the practice. Contribute to proposals, thought leadership, and methodology assets. Identify follow-on work with existing clients.\nRequired Regulatory Expertise\nYou should be able to walk into a client room and speak credibly to at least three of the following frameworks and regimes - not from a study guide, but from having done the work:\nFederal Reserve Board (FRB) / SR 11-7 model risk, SR 20-24 and SR 21-14 cyber and operational resilience guidance, MRAs and MRIAs.\nOCC Heightened Standards (12 CFR Part 30, Appendix D) and OCC cyber risk expectations.\nNY DFS Part 500 - including the 2023 amendments: CISO reporting to the Board, governance, 72-hour incident notification, ransomware payment notification, asset inventory, MFA, encryption, and Class A company requirements.\nFFIEC Cybersecurity Assessment Tool, IT Examination Handbook (Information Security, Business Continuity, Operations).\nSEC Cybersecurity Disclosure Rules (Regulation S-K Item 106, Form 8-K Item 1.05) and Reg S-P amendments.\nNIST CSF 2.0, NIST 800-53, NIST 800-171; ISO/IEC 27001/27002; CIS Controls.\nSOX ITGC, PCI DSS 4.0, GLBA Safeguards Rule, and SOC 1/SOC 2 attestation work - nice-to-have.\nRequired Technical & Operational Expertise Cyber\nIncident Management\nHands-on experience leading or coordinating IR for ransomware, business email compromise, third-party breach, insider, and nation-state events.\nWorking knowledge of NIST SP 800-61, MITRE ATT&CK, and the practical mechanics of containment, eradication, and recovery in complex enterprise environments.\nComfort coordinating across legal, privacy, communications, forensics (Mandiant, CrowdStrike, Kroll, Unit 42), insurance, and regulators under time pressure.\nExperience drafting and defending incident notifications and regulator communications under NY DFS Part 500, SEC 8-K Item 1.05, GDPR, and state breach laws.\nVulnerability Remediation & Patch Management\nDemonstrated experience designing or remediating enterprise VM programs: scanning coverage, risk scoring (CVSS, EPSS, KEV), SLA design, exception governance, and metrics.\nOperational familiarity with Qualys, Tenable (Nessus / Tenable.io / Tenable.sc), Rapid7 InsightVM, Wiz, Microsoft Defender for Cloud, and ServiceNow Vulnerability Response.\nPatch management at scale across Windows, Linux, network, container, and cloud workloads - including the political work of getting business units to actually patch.\nIdentity & Access Management (IAM)\nStrong grasp of IAM domains: identity governance and administration (IGA), privileged access management (PAM), authentication and federation, joiner-mover-leaver, access certification, and SoD.\nWorking experience with at least two of: SailPoint, Saviynt, Okta, Azure AD / Entra ID, Ping, CyberArk, BeyondTrust, Delinea.\nPractical experience reducing standing privilege, designing role models, and remediating common findings (orphaned accounts, toxic combinations, shared service accounts, weak recertification).","description_format":"text","description_chars":5391,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-09-11T09:42:10Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.521,"p_room":0.28,"age_days":124,"expected_fill_days":38,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/electric-mind-senior-consultant-cyber-security","json_url":"https://alion.io/job/electric-mind-senior-consultant-cyber-security.json","meta":{"generated_at":"2026-10-21T15:04:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21465,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58136},"rest":"https://alion.io/mcp/rest/get_company?id=58136"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felectric-mind-senior-consultant-cyber-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felectric-mind-senior-consultant-cyber-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felectric-mind-senior-consultant-cyber-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/electric-mind-senior-consultant-cyber-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felectric-mind-senior-consultant-cyber-security"}]}