State and Local Government Cybersecurity Consultant

Job Family:

Risk & Regulatory Compliance Consulting

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Cybersecurity consultants supporting our State & Local Government practice are responsible for working with organizations to employ technology (new, existing, emerging) as a catalyst for transformational change. Cybersecurity consultants enable innovation through intelligent segmentation, entity resolution and network generation, machine learning-driven alert dispositioning, cloud migration, full stack development, user experience, user interface and visual design, product and project management, and digital and social media strategy. Cybersecurity consultants have responsibility for client management, solution implementation, and delivering project results.

Responsibilities include:

Management Consulting:

• Connect Guidehouse consulting solutions to solve client problems.

• Leverage industry connections to foster client and firm success: establish business development opportunities, communicate well-organized, effective Guidehouse solutions and presentations to client and internal executives.

• Lead and support workstreams that enable the assessment, development, and enhancement of state and local government cybersecurity and related technology integration strategies, operating plans, business processes, organizational structures, and supporting infrastructure.

• Depending on level, this role also involves practice and business development activities including creation of new service solution offerings; mentoring and coaching consulting staff; and collaborating with cybersecurity, compliance, data and analytics, IT enablement and enterprise software leaders.

• Communicating solutions and new strategies to clients through meetings, reports, and presentations.

Leadership & Strategy:

• Assist in developing and executing cybersecurity strategy and implementing/aligning with established cybersecurity frameworks and aligning with business and regulatory requirements; Serve as a key advisor on cybersecurity policies, governance, and incident response strategies.

Risk Management & Compliance:

• Assist in compliance with federal and state cybersecurity regulations (e.g., NIST, FISMA, NERC CIP, CIS Controls); Lead risk assessments, vulnerability management, and third-party security evaluations; develop and enforce policies and controls to mitigate security risks across state or large local agencies.

Cybersecurity:

• Guide the design and implementation of secure infrastructure, cloud environments, and application security best practices; Evaluate emerging security technologies and frameworks to enhance the state’s security posture.

• Integrate security into DevSecOps and digital transformation initiatives.

• Identify and evaluate potential security threats and vulnerabilities within an organization's IT or OT infrastructure; Design and implement comprehensive security plans and policies to protect sensitive data and systems.

• Assist in performing regular security assessments and audits to ensure compliance with industry standards and regulations. Establish and enforce security controls to safeguard information systems and mitigate risks.

• Educate employees on best practices for cybersecurity and promote a culture of security awareness.

What You Will Need:

• Bachelor’s degree AND three to five (3-5) years Cybersecurity related industry experience with at least 2+ years in State & Local Government sector for minimum level. Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field paired with an MBA preferred.

• Experience must include either multiple years working in state or local government leading cybersecurity projects OR multiple years supporting state and local government cybersecurity work as a management consultant.

• Demonstrated ability to articulate how leading technologies can be positioned or architected to solve business challenges and problems

• Demonstrated familiarity and application of leading cybersecurity frameworks, conducting NIST CSF assessments, and implementing NIST or CIS controls

• Strong project management, communication, including both written and verbal, and critical analysis and problem-solving skills

• Highly developed organizational and management skills

• Ability to manage multiple time-sensitive priorities without diminished effectiveness

• Must be proactive and ready to be highly visible