{"id":2743575,"url":"https://alion.io/job/grant-thornton-cyber-security-privacy-director-crowdstrike","title":"Cyber Security & Privacy Director - CrowdStrike","company":{"id":1045227,"name":"Grant Thornton","domain":"grantthornton.com","url":"https://alion.io/company/grant-thornton-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":75,"open_postings":23,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":217580,"max":281494,"currency":"USD","period":"year","gross":null,"usd_annual":281494},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Crowdstrike","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Google SecOps","optional":true},{"name":"Microsoft Sentinel","optional":true}],"status":"live","first_seen_at":"2026-10-16T18:02:02Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-19T08:58:06Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Grant Thornton Advisors LLC is seeking a Cyber & Privacy Director - Crowdstrike to join our growing CrowdStrike practice within the Cyber & Privacy Managed Security Services team. This role will lead the delivery, optimization, and expansion of CrowdStrike Falcon engagements, including Managed Security Services (MSS), Managed Detection & Response (MDR), and Next-Gen SIEM (NG-SIEM) deployments. The Manager will act as a trusted advisor to clients, mentor delivery teams, and partner with alliance leadership to grow Grant Thornton's CrowdStrike alliance.\nFrom day one, you’ll be empowered by the greater Cyber & Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently.\nYour day-to-day may include:\nClient Delivery & CrowdStrike Platform Leadership\nLead end-to-end delivery of CrowdStrike Falcon deployments, including Falcon Complete (MDR), NG-SIEM, Identity Protection, Cloud Security, Exposure Management, and Charlotte AI / Agentic SOAR.\nServe as the technical lead on CrowdStrike optimization engagements, including sensor deployment, policy tuning, detection engineering, and platform health management.\nDesign and implement custom detections, escalation workflows, and automated response playbooks aligned to client operating models.\nDrive continuous optimization of client CrowdStrike investments through recurring platform reviews, tuning cycles, and use-case development.\nPartner with Auxis nearshore delivery teams to ensure 24x7x365 monitoring quality, SLA adherence, and consistent client experience.\nClient Advisory & Relationship Management\nAct as the primary CrowdStrike subject matter expert on client engagements, translating platform telemetry into executive-level risk insights.\nLead client-facing workshops, executive briefings, and quarterly business reviews.\nSupport scoping, pricing, and proposal development for new CrowdStrike opportunities (MSS, MDR, NG-SIEM).\nManage engagement financials including budget, resource utilization, and margin.\nPractice Development & Team Leadership\nMentor senior associates, associates, and interns; support career development and technical enablement across the CrowdStrike delivery team.\nContribute to sales enablement collateral, playbooks, one-pagers, and internal thought leadership.\nPartner with the CrowdStrike alliance team to strengthen the joint go-to-market motion and represent Grant Thornton at CrowdStrike partner events (e.g., Fal.Con).\nContribute to the maturity of Grant Thornton's Security Operations Center (SOC) capabilities and managed engineering offerings.\nYou have the following technical skills and qualifications:\nBachelor’s degree in Cybersecurity, Information Systems, Computer Science or a related field.\nRelevant certifications such as CrowdStrike certifications (CCFA, CCFR, CCFH, CCSE), CIPP, CIPM, CISSP, CISM, or other related certifications required\n10+ years of experience in cybersecurity consulting with at least 3 years hands on CrowdStrike Falcon platform\nDemonstrated experience deploying and managing Falcon modules: Insight (EDR), Prevent, Identity Protection, NG-SIEM, Cloud Security, and Falcon Complete.\nStrong understanding of SOC operating models, MITRE ATT&CK, incident response lifecycle, and detection engineering.\nProficiency with scripting/query languages relevant to CrowdStrike (e.g., CQL/Falcon Query Language, Python, PowerShell).\nExperience leading client-facing engagements, managing multiple workstreams, and delivering executive-ready outputs.\nExcellent written and verbal communication skills with the ability to translate technical concepts for CISO and CIO-level audiences.\nPreferred experience integrating CrowdStrike with adjacent platforms (Microsoft Sentinel/Defender XDR, Google SecOps).\nPreferred familiarity with agentic SOAR workflows and Charlotte AI use cases.\nExceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.\nCan travel as needed\nThe base salary range for this position is between $217,580 and $281,494. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate.","description_format":"text","description_chars":4478,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-16T21:36:29Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 60","filings_12m":0,"filings_prev_12m":4,"green_card_filings_12m":60,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":28,"reasons":["conf:10","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":281494,"is_top_pay":true},"html_url":"https://alion.io/job/grant-thornton-cyber-security-privacy-director-crowdstrike","json_url":"https://alion.io/job/grant-thornton-cyber-security-privacy-director-crowdstrike.json","meta":{"generated_at":"2026-10-19T19:18:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15284,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1045227},"rest":"https://alion.io/mcp/rest/get_company?id=1045227"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrant-thornton-cyber-security-privacy-director-crowdstrike"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrant-thornton-cyber-security-privacy-director-crowdstrike"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrant-thornton-cyber-security-privacy-director-crowdstrike"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grant-thornton-cyber-security-privacy-director-crowdstrike\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrant-thornton-cyber-security-privacy-director-crowdstrike"}]}