The Role
Lead CMMC consulting engagements, architect tailored security programs, and guide organizations through compliance while mentoring a team of security consultants.
Summary Generated by Built In
Work with a nationally ranked CPA and advisory firm that is passionate for what's next. Aprio has 30 U.S. office locations, one in the Philippines and more than 2,100 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio.
Join Aprio's Risk Advisory and Assurance Services team and you will help clients maximize their opportunities. Aprio is a progressive, fast-growing firm looking for a Senior Manager to join their dynamic team.
Ready to do more with your Microsoft security expertise? Join SecurityBricks, powered by Aprio, and help organizations across industries navigate complex cybersecurity and compliance landscapes with confidence.
At SecurityBricks, we’re not just checking boxes—we’re securing the future. As a Senior Microsoft Security Engineer, you’ll work with cutting-edge Microsoft tools, support high-impact compliance frameworks like FedRAMP and CMMC, and help shape the security posture of both public and private sector organizations.
We are seeking an experienced Senior Manager of Security and Compliance to lead our CMMC consulting practice serving small to enterprise organizations across the Defense Industrial Base. This senior leadership role will guide clients through their CMMC Level 2 certification journey, architecting tailored security programs that leverage Microsoft's enterprise security ecosystem while ensuring practical, cost-effective compliance for organizations of varying sizes and maturity levels.
Key Responsibilities:
CMMC Consulting Practice Leadership
- Lead CMMC Level 2 consulting engagements from initial assessment through certification readiness
- Conduct gap assessments against NIST SP 800-171 and CMMC Level 2 requirements for diverse client environments
- Develop customized remediation roadmaps scaled to client size, budget, and technical capabilities
- Prepare organizations for C3PAO assessments and provide certification readiness reviews
- Support multiple concurrent client engagements across various industries and organizational sizes
Microsoft Security Solutions Architect
- Design right-sized Microsoft security solutions appropriate for small business through enterprise clients
- Architect scalable implementations of Microsoft 365 (Business Premium to E5/G5), Azure, and Defender suite based on client maturity and budget
- Implement Microsoft Purview, Azure Information Protection, and DLP solutions tailored to CUI protection requirements
- Deploy Microsoft Sentinel or cost-effective alternatives for security monitoring across client environments
- Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements
- Create reusable frameworks and templates that accelerate client implementations
Client Advisory & Strategic Guidance
- Serve as trusted advisor to C-suite and senior leadership on CMMC strategy and investment priorities
- Translate complex CMMC requirements into actionable business recommendations
- Provide guidance on scope definition, boundary establishment, and enclave strategies
- Advise on contractor teaming arrangements and CMMC compliance flow-down requirements
- Present security program maturity assessments and executive-level progress reporting
- Support proposal development and contract reviews for CMMC-related security requirements
Team Leadership & Practice Development
- Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels
- Develop standardized methodologies, playbooks, and accelerators for CMMC consulting engagements
- Establish quality assurance processes and peer review mechanisms for client deliverables
- Create training programs to elevate team capabilities in CMMC and Microsoft security technologies
- Foster culture of client success, technical excellence, and continuous learning
- Manage resource allocation and workload distribution across concurrent client engagements
Practice Growth & Thought Leadership
- Identify opportunities to expand consulting services and develop new offerings
- Contribute to business development activities and proposal responses
- Represent the practice at client events
- Develop thought leadership content on CMMC implementation best practices
- Build relationships with Microsoft partners, C3PAOs, and industry organizations
- Stay current on CMMC program updates and DoD cybersecurity requirements
Required Qualifications
- Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred)
- 10+ years of progressive experience in information security and compliance, with significant consulting experience
- 5+ years leading teams and managing multiple concurrent projects or client engagements
- Proven track record successfully guiding organizations through CMMC/NIST SP 800-171 implementations
- Deep expertise working with small businesses through enterprise organizations on compliance initiatives
- Extensive hands-on experience implementing Microsoft security solutions across varied environments
- Strong understanding of Defense Industrial Base, CUI handling requirements, and DFARS compliance
- Experience translating technical requirements into business terms for non-technical stakeholders
Technical Competencies
- CMMC Level 2 and NIST SP 800-171 control implementation across diverse environments
- Microsoft 365 security architecture (Business Premium through E5/G5 licensing)
- Azure and Azure Government cloud security configurations
- Microsoft Defender suite deployment and optimization
- Microsoft Purview, Azure Information Protection, and data classification strategies
- Microsoft Sentinel and cost-effective SIEM alternatives
- Identity and Access Management solutions (Azure AD, Conditional Access)
- Network segmentation and boundary protection strategies
- Security documentation and technical writing
Preferred Certifications
- CISSP, CISM, or equivalent security leadership certification
- Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
- NIST SP 800-171 assessment experience or DIBCAC certification
- Additional relevant certifications (Security+, CISA, GCIH, GIAC)
Key Competencies
- Client Relationship Management: Build trust and credibility with stakeholders at all organizational levels
- Adaptive Communication: Translate technical concepts for audiences from small business owners to enterprise CISOs
- Scalable Solutions Design: Right-size security programs based on organizational maturity, resources, and risk tolerance
- Business Acumen: Balance security requirements with operational realities and budget constraints
- Project Leadership: Manage complex, multi-phase engagements with competing priorities and timelines
- Mentorship: Develop junior consultants and elevate overall team capabilities
- Problem-Solving: Navigate unique challenges across diverse client environments and technical landscapes
Travel Requirements
- Approximately once per month for client site visits, assessment activities, team meetings, or industry conferences. Travel frequency may increase during initial client onboarding phases or certification preparation periods. Expectation is 10-15% travel annually.
Ideal Client Engagement Experience
- Small businesses (50-500 employees) new to CMMC requirements
- Mid-market companies establishing CUI handling environments
- Enterprise defense contractors optimizing existing compliance programs
- Organizations transitioning from NIST SP 800-171 self-assessment to CMMC Level 2 certification
- Companies implementing Microsoft cloud solutions for government contracting
- Defense Industrial Base supply chain participants navigating flow-down requirements
The application window is anticipated to close on April 9th and may be extended as needed.
Why work for Aprio:
Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm.
Perks/Benefits we offer for full-time team members:
- Medical, Dental, and Vision Insurance on the first day of employment
- Flexible Spending Account and Dependent Care Account
- 401k with Profit Sharing
- 9+ holidays and discretionary time off structure
- Parental Leave – coverage for both primary and secondary caregivers
- Tuition Assistance Program and CPA support program with cash incentive upon completion
- Discretionary incentive compensation based on firm, group and individual performance
- Incentive compensation related to origination of new client sales
- Top rated wellness program
- Flexible working environment including remote and hybrid options
What’s in it for you:
- Working with an industry leader: Be part of a high-growth firm that is passionate for what’s next.
- An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients.
- A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture.
- Entrepreneurship: Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally.
- Growth opportunities: Grow professionally in an environment that fosters continuous learning and advancement.
- Competitive compensation: You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance.
EQUAL OPPORTUNITY EMPLOYER
Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law.
Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.
Top Skills
Azure
Azure Information Protection
Microsoft 365
Microsoft Defender
Microsoft Purview
Microsoft Sentinel
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Aprio is a premier CPA and business advisory firm that advises clients and associates on how to achieve what’s next. Aprio’s associates work as integrated teams across advisory, assurance, tax, outsourcing, staffing and private client services, bringing the best thinking and personal commitment to each client. Across practices, Aprio brings together proven expertise, deep understanding and strategic foresight for industries including Manufacturing and Distribution; Non-Profit and Education; Professional Services; Real Estate and Construction; Retail, Franchise and Hospitality; and Technology and Blockchain.
Headquartered in Atlanta, Georgia, Aprio has grown to over 1,000+ team members. To serve clients wherever life or business may take them, Aprio’s teams speak more than 30 languages and work with clients in over 50 countries.
