Cyber Security Manager

From the beginning, our goal was to establish an advisory firm that stands apart from the rest – one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value.

Our commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here.

We are seeking a technically strong Cybersecurity Manager to join our high-performing Cybersecurity & Privacy practice. This is a hands-on role requiring deep expertise across cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The ideal candidate brings a strong technical foundation and the ability to design, implement, and assess security solutions across complex client environments. The position is hybrid (60% on-site/client, 40% remote) with local travel throughout Los Angeles and Orange County.

What You'll Do

Typical engagements include:

• Cybersecurity risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, Cloud Security Alliance, and MITRE ATT&CK
• Security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint security, SIEM, IDS/IPS, and firewall platforms
• Security transformation programs — architecture design, solution implementation, and technical remediation
• Threat modeling, penetration testing advisory, and proactive defense strategy
• Capability uplift across Vulnerability Management, Incident Response, IT Disaster Recovery, Business Continuity, Threat Intelligence, and Security Monitoring
• Privacy program audits supporting CCPA/CPRA and GDPR compliance
• PCI-DSS compliance implementation and advisory
• Apply MITRE ATT&CK and other threat modeling methodologies to map adversary techniques and inform defensive controls
• Review and harden application and system disaster recovery plans; identify technical gaps and develop remediation playbooks
• Assess Incident Response preparedness; design IR playbooks, runbooks, and facilitate technical tabletop exercises