Senior Consultant - Cybersecurity Engineering

Company Description

Sia Partners is a next-generation consulting firm dedicated to creating state-of-the-art narratives for transformation and innovation and deploying them at scale. Our goal is to deliver superior value and tangible results to our clients as they navigate the digital revolution and achieve transformations which generate a positive impact. Our global footprint and expertise in more than 40 sectors and services allow us to enhance our clients’ businesses worldwide. We guide their projects and initiatives in strategy, business transformation, IT & digital strategy, and Data Science. 

Why Join The Sia Village?

Excellence | Entrepreneurship | Innovation | Teamwork | Care & Support | Employee Wellbeing

These are the six core values that guide all our actions. As an expression of our values, our Sia Village concept describes our commitment to fostering a sense of community within and among our offices. We believe that knowledge sharing is the key, not only to innovation, but to the growth and development of our people.

Your experience at Sia Partners will be enriched by a(n):  

• Entrepreneurial journey
• Career advocacy program that supports achieving professional development goals through guidance, and real-time feedback
• Continuous learning & development opportunities
• Diversity, equity, and inclusion programs with an ever-growing list of global affinity initiatives
• Annual seminar, an in-person value-add experience, that allows you to network with colleagues throughout North America

Job Description

Our US Cybersecurity team is an integral part of our Global Store Front, providing consulting services to our clients on a wide array of topics, including but not limited to:

Cyber Strategy:

• Cyber for Boards & Executives; Cyber Target Operating Model; Cyber M&A Due Diligence
• Cyber Transformation; Cyber Maturity Assessment & Rating; Cyber Mentoring for Startups
• CISOaaS | DPOaaS | BCMaaS | CMaaS

Cyber Risk:

• Cyber Risk Management; Cyber Risk Assessment & Treatment; Cyber Risk Quantification
• Third-Party Risk Management; Cyber Insider Risk; Cyber Risk Analytics & Reporting
• Cyber Risk Review SaaS: C2R

Cyber Compliance:

• Cyber Compliance Management: ISO 270xx, ISO 27701, ISO 223xx, CMMC, SWIFT CSP, PCI DSS, NIST, etc.
• Cyber Assurance Framework
• Data Privacy Assurance

Cyber Operations:

• Cloud Security
• OT | SCADA | ICS Security; IoT | IIoT | WoT Security
• Security Architecture; Security Configuration
• Infrastructure & Endpoint Protection; Data Protection Technologies
• IAM | PAM | IAG | CIAM | DAG
• SSDLC | SecDevOps
• Cryptography | Encryption

Cyber Resilience:

• Threat hunting; Digital Forensics; Incident Response
• Vulnerability and Patch Management
• Penetration Testing | Red Teaming
• Wargaming and Crisis Management
• IT Service Continuity Management; Business Continuity Management
• Physical Security & Safety
• Operational Resilience

As a management consultant, you will address these topics through that lens. To be effective, you will have to be successful with the following responsibilities: 

• Project manage and/or support on a range of client delivery, as part of an on-site or remote project team
• Conduct effective meetings
• Execute on assessments
• Collaborate with internal and client project team members, and contribute to internal communications and readiness activity within the program team and with client groups
• Provide status reporting of progress using the RAID method – Risks, Assumptions, Issues, Dependencies
• Maintain program sites as a repository for all project information
• Contribute to the development of high-quality and timely deliverables
• Perform subject matter research and business analysis
• Assist in the coordination and development of client proposals
• Support practice, thought leadership, and people development

Qualifications

• Bachelor’s degree required in either: Business/Finance, Computer Science, Engineering, IT, Mathematics, etc.
• 3+ years of recent client-facing management consulting experience with an emphasis on cyber related projects, ideally covering one or more of the following topics:
  • Cybersecurity requirements, metrics, reporting procedures and control frameworks (NIST, ISO, CMMC, SANS, RCSA, etc.)
  • Cyber, IT, BCP/DR policies and procedures
  • Third party risk management (TPRM) / vendor risk
  • Red / Purple