Compliance Consulting:
- Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping
- Prepare organizations for C3PAO assessments and provide certification readiness reviews
- Manage resource allocation and workload distribution across concurrent client engagements
Cloud Security Solutions consulting:
- Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.
- Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..
- Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements
Team Leadership & Practice Development:
- Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels
- Develop standardized methodologies, playbooks, and procedures for technical delivery
- Establish quality assurance processes and peer review mechanisms for client deliverables
- Create training programs to elevate team capabilities in CMMC and Microsoft security technologies
- Foster culture of client success, technical excellence, and continuous learning
Practice Growth & Thought Leadership:
- Identify opportunities to expand consulting services and develop new offerings
- Contribute to business development activities and proposal responses
- Represent the practice at client events
- Develop thought leadership content on CMMC implementation best practices
- Build relationships with Microsoft partners, C3PAOs, and industry organizations
- Stay current on CMMC program updates and DoD cybersecurity requirements
Required Qualifications:
- Bachelor’s degree in computer science, Information Security, or related field (Master's preferred)
- 10+ years of progressive in information security and compliance, with significant consulting experience
- 4+ years managing security consultants with proven track record of team productivity
- Deep expertise in securing complex cloud environments, threat modeling, and risk assessment
- Strong cross-functional collaboration skills, balancing security requirements with business objectives
- Clear and persuasive communicator in both writing and verbal settings
- Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams
- Passionate about developing engineers' careers in a supportive yet challenging environment
- 5+ hands-on experience implementing Microsoft security solutions across varied environments
- Experience translating technical requirements into business terms for non-technical stakeholders
- Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
Technical Competencies:
- Azure and Azure Government cloud security configurations
- Microsoft Defender suite deployment and optimization
- Microsoft Purview, Azure Information Protection, and data classification strategies
- Microsoft Sentinel and cost-effective SIEM alternatives
- Identity and Access Management solutions (Azure AD, Conditional Access)
- Network segmentation and boundary protection strategies
- Security documentation and technical writing
Preferred Certifications:
- CISSP, CISM, or equivalent security leadership certification
- Additional relevant certifications (Security+, CISA, GCIH, GIAC)
Key Competencies:
- Client Relationship Management: Build trust and credibility with stakeholders at all organizational levels
- Adaptive Communication: Translate technical concepts for audiences from small business owners to enterprise CISOs
- Scalable Solutions Design: Right-size security programs based on organizational maturity, resources, and risk tolerance
- Business Acumen: Balance security requirements with operational realities and budget constraints
- Project Leadership: Manage complex, multi-phase engagements with competing priorities and timelines
- Mentorship: Develop junior consultants and elevate overall team capabilities
- Problem-Solving: Navigate unique challenges across diverse client environments and technical landscapes
Top Skills
What We Do
Aprio is a premier CPA and business advisory firm that advises clients and associates on how to achieve what’s next. Aprio’s associates work as integrated teams across advisory, assurance, tax, outsourcing, staffing and private client services, bringing the best thinking and personal commitment to each client. Across practices, Aprio brings together proven expertise, deep understanding and strategic foresight for industries including Manufacturing and Distribution; Non-Profit and Education; Professional Services; Real Estate and Construction; Retail, Franchise and Hospitality; and Technology and Blockchain.
Headquartered in Atlanta, Georgia, Aprio has grown to over 1,000+ team members. To serve clients wherever life or business may take them, Aprio’s teams speak more than 30 languages and work with clients in over 50 countries.

.png)

%20copy.jpg)





