Cynaxus is hiring a Senior Cybersecurity Consultant to lead client engagements across our regulated-industry portfolio. This is a hands-on senior role — you will be the primary point of accountability on engagements, leading the work end-to-end with support from senior peers. You will not hand findings to a junior bench; you will own them through remediation.
About the role
You will run cybersecurity assessments, lead remediation programs, advise executives on strategic decisions, and represent Cynaxus to client boards and audit committees. Engagements vary by client and sector — from FFIEC examination readiness for a community bank, to CMMC remediation for a defense subcontractor, to ransomware recovery for a healthcare system. A typical quarter might include two assessment-driven engagements, one long-running remediation program, and standing advisory time with a retained client's CISO.
What you'll do
Scope and lead security assessments against the frameworks your client is actually examined under — FFIEC CAT, HIPAA Security Rule, CMMC, NIST CSF, ISO 27001. Translate findings into remediation roadmaps with owners, budgets, and dates, then drive them. Sit with general counsel and outside counsel during incidents. Write the board memo yourself — your written work goes to audit committees unedited. Mentor no one junior, because there is no one junior; sharpen and be sharpened by peers instead.
What you bring
15+ years in hands-on cybersecurity practice. Deep experience in at least two of: financial services, healthcare, defense/government, legal, energy, higher education. Track record of leading engagements with executive accountability — not just delivering individual deliverables. Current certification required: CISSP, CISA, CISM, or a directly comparable senior cybersecurity credential. Excellent written and verbal communication, including the ability to translate technical risk for boards and counsel without losing precision.
What we offer
Senior peers, no junior offshore handoff. Vendor-neutral delivery — your recommendations are never distorted by resale economics. Fixed-fee engagements paced for quality. Compensation tied to engagement outcomes, not hours billed. US-based, remote-first work culture.