Resourcive: Cyber Advisor

About ResourciveResourcive is an independent IT advisory and sourcing firm that helps mid-market and enterprise organizations make better technology decisions. We work primarily with private equity-owned and high-growth companies that are navigating increasing complexity in their technology and security environments. We are vendor-agnostic, process-driven, and focused on outcomes over transactions. Our Cyber Practice works directly with IT and security leaders to design and execute security programs, evaluate and select security providers, and translate technical risk into business decisions their organizations can act on.We are a small, high-performance team. Everyone here carries real responsibility from day one.The RoleWe are looking for a Cyber Security Advisor to join our Cyber Practice and deliver directly to clients. This is not a sales role, not a tools implementation role, and not an internal security role. It is a client-facing advisory position for someone who has already made the transition from practitioner to consultant and is ready to operate with significant autonomy.You will work with mid-market and enterprise IT and security leaders across a range of engagements: framework-based gap assessments, fractional CISO advisory, security program design and roadmap development, ongoing program management, and structured security technology selections. You will be the person the client calls when they need to understand where they stand, what to do next, and whether their security providers are actually delivering.This role is approximately 70% advisory and 30% sourcing and vendor selection support.What You Will Actually DoAdvisory and Program Management (primary):Lead framework-based gap assessments (NIST CSF, CIS Controls, SOC 2, and similar) and translate findings into prioritized, executable roadmaps the client can act on with their existing team and budgetServe as a fractional CISO for mid-market and enterprise clients: advise CIOs and IT Directors on security program structure, vendor management, and risk prioritizationDesign and manage ongoing security programs: define reporting cadence, track initiative progress, manage relationships with MSP and MSSP providers on the client's behalf, and keep the business accountable to the roadmapHelp clients communicate security posture and investment decisions to executive stakeholders; ghost-write board presentations, business cases, and risk summaries that non-technical leadership can understand and act onAdjust program direction as business needs evolve, without losing momentum or client confidenceSourcing and Vendor Selection (supporting):Participate in structured vendor selection processes for security technologies and managed services including MDR, SOC, MSSP, and adjacent tools, using Resourcive's established selection methodologyThe selection process itself is structured and repeatable; your value in this work is your technical credibility and ability to evaluate vendor claims, ask the right questions, and give the client an informed perspective on tradeoffsSupport contract and commercial negotiations alongside senior advisorsPractice and Credibility Building:Represent the Cyber Practice at industry events and conferences as a subject matter expertContribute to the development of our engagement methodology and internal knowledge baseWhat We Are Looking For5 to 8+ years of cybersecurity experience, with a meaningful portion of that in a client-facing advisory, consulting, or fractional roleA technical practitioner background (security engineering, incident response, SOC leadership, or similar) that you have already translated into advisory work; you understand how the technology works but your value is no longer in operating itDemonstrated ability to manage client relationships at the CIO or Director of IT level: setting expectations, delivering difficult findings, and maintaining trust through a full engagement lifecycleExperience designing or managing a security program, not just assessing one; you know what it takes to move an organization from a gap analysis to measurable progressStrong written communication skills; the ability to write a clear, credible board summary or executive business case is a meaningful differentiator for this roleComfort operating in a small firm environment where you will have significant autonomy and limited administrative supportHelpful but not required:Familiarity with security technology categories and the vendor landscape (MDR, SIEM, MSSP, endpoint, identity); depth here is a plus, not a gateExperience presenting at industry conferences or contributing to public-facing thought leadershipRelevant certifications (CISSP, CISM, or similar); we care more about demonstrated advisory capability than credential stackingWhat This Is NotThis role does not involve hands-on configuration, tool administration, or managed security operations. We place vendors for that work. The advisor's job is to help the client make the right decision, manage the provider relationship, and ensure the outcome matches the intent.Compensation:Base Range : $110,000 - $130,000 and total compensation range $150,000-$170,000Actual annual salary offered to a candidate will be based on a number of variables including work experience, education and skills/ achievements, and will be mutually agreed upon at the time of offer. For non-sales roles and sales roles with a variable component, total compensation reflects both a base salary and variable targets.While we’re committed to providing top-tier solutions, we’re just as committed to supporting our own team. Our employees enjoy a variety of comprehensive benefits, including medical/dental/vision coverage, life insurance, and a 401(k) plan with matching provision. Outside of CA, ScanSource grants 128 hours of paid time off (PTO) each calendar year (prorated for date of hire). In the state of CA, employees accrue a set number of hours each pay period equaling the same 128 hours of PTO. ScanSource also celebrates 8 paid company holidays.ScanSource, Inc. is an Equal Opportunity EmployerEOE/M/FJob SummaryRequisition Number: RESOU004794Job Category: ResourciveSchedule: Full-Time