Senior Consultant, Security

Overview

Do you have the CHOPS? IT Solutions lives its values: Client Success is Our Success, Hungry for the Journey, Ownership Thinking, Passionate Problem Solving, and Surrender the Ego. If your values align, we want you to be part of a fast-growing Managed Service Provider specializing in high-end technology solutions for small and mid-market businesses. IT Solutions is a nationally recognized leader in IT with over 25 years of experience and thousands of satisfied clients. Join and grow with us as we continue to innovate new ways to help businesses Experience Excellence.

Job Summary:

The ideal candidate will be an experienced Senior Security Consultant or CISO who can lead clients in building and maturing their cybersecurity programs while aligning with frameworks such as NIST CSF, CIS Top 18, HIPAA, ISO/IEC 27001 and 27799, HITRUST and SOC 2. They must have hands-on experience conducting CMMC 2.0 Level 2 gap assessments and advising on remediation strategies to prepare clients for compliance.

A key part of this role is helping clients advance in their security maturity journey while actively decreasing their overall risk footprint. The candidate will guide clients in performing detailed security maturity assessments, maintaining risk registers, and developing practical, framework-aligned security roadmaps tied to client priorities and risk levels.

The Senior Consultant will also facilitate policy workshops, helping clients align documentation with best practices and understand the purpose and implementation of each policy area. They will oversee dashboard reporting to track progress on risk reduction, training participation, and vulnerability trends, while leading quarterly executive reviews to maintain clear alignment on priorities with client leadership.

Equally important is the ability to advise and guide both technical and non-technical client stakeholders on compliance, regulations, and all aspects of cybersecurity. Strong client-facing communication skills and a track record of delivering structured senior security consulting services or vCISO are essential for success in this role.

Responsibilities:

• Security Assessments and Compliance Alignment

• Lead Security Maturity Level Assessments (SMLA) aligned with frameworks including NIST CSF, CIS Top 18, HIPAA, SOC 2, ISO 27001 and CMMC 2.0.
• Conduct CMMC 2.0 Level 2 gap assessments, identifying deficiencies and providing clear remediation plans to prepare clients for audits.
• Analyze data and deliver IT health and risk assessments with recommendations.
• Map identified gaps and risks to compliance frameworks, providing leadership with actionable insight on priorities and timelines.
• Review and validate client documentation and evidence against framework requirements.

• Risk Management and Roadmap Development

• Build and maintain risk registers that capture evolving threats and operational challenges, updated regularly.
• Develop structured, framework-aligned security roadmaps, sequencing initiatives across governance, technology, user controls, and vendor dependencies.
• Align remediation activities with business risk, compliance drivers, and resource constraints.
• Track progress and adjust plans based on changing risk environments and client priorities.

• Policy and Program Oversight

• Facilitate policy workshops covering key topics like Acceptable Use, Access Control, Incident Response, and Data Classification.
• Provide clients with advisory guidance, policy templates, and best-practice recommendations while ensuring alignment with various frameworks and regulations.
• Review existing policies for effectiveness and alignment while empowering clients to finalize drafts and manage internal approvals.
• Guide clients through building a sustainable internal security program that aligns with industry standards.

• Reporting and Executive Engagement

• Develop and maintain executive dashboards that visualize progress across risk reduction, maturity improvements, training participation, vulnerability management, and dark web monitoring.
• Lead quarterly strategic review sessions with client leadership, discussing risks, roadmap execution, and evolving priorities.
• Serve as a trusted advisor to executive teams, providing clear, actionable updates without unnecessary complexity.
• Support clients in aligning security investments with measurable business outcomes.

Experience: Knowledge, Skills, and Abilities:

• Professionalism
• Ability to translate complex technical and security issues to non-technical customers
• Strong oral and written communication skills
• Effective time management and multi-tasking skills
• Ability to present to senior executive and CxO level clients
• Maintains the ability to stay organized and detail-oriented
• Demonstrates a passion for solving problems and driving continuous improvement
• Exceptional organizational skills and the ability to self-manage in a fast-paced environment

Experience:

• Minimum 5–8 years in cybersecurity leadership or consulting roles
• Strong knowledge of frameworks such as NIST CSF, CIS Top 18, HIPAA, SOC 2
• Strong knowledge of regulations like GDPR, FISMA, FedRAMP and CMMC
• Proven track record leading CMMC 2.0 Level 2 assessments and POAM remediations
• Experience in risk management, roadmap development, policy advisory, and executive-level communication
• Bachelor’s degree in Computer Science, related discipline or equivalent professional experience

Certificates, Licenses, Registrations:

• CISSP, CISM or equivalent information security certification
• CMMC RP/CCA/CCP preferred

Compensation Package: ITS offers a full benefits package, including:

• Rich Medical and prescription plans
• Dental & Vision
• Paid Holidays and Flexible Paid Time Off
• 401K/401K Roth with Safe Harbor matching
• Stock Appreciation Rights
• Company-paid life insurance, long-term and short-term disability insurance
• Company-paid mental health support & financial wellness services
• FSA for medical and dependent care
• HSA option with compatible medical plan
• Company-paid training, materials, and exams
• Performance-based bonuses

IT Solutions is an equal employment opportunity employer that provides opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology
• Industries

Referrals increase your chances of interviewing at IT Solutions by 2x

Get notified about new Security Consultant jobs in Kansas City, MO.

Sr. Consultant - Attack and Penetration- Red Team | Remote, USA

Engineering Manager - Security Standards and Hardening

Linux Cryptography and Security Engineer

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.