Principal Security Consultant (Req #1132)

About this role

Overview

As a Principal Security Consultant, you will function as a Security Advisory Services lead Security Consultant for ePlus service solutions, reporting to the Managing Security Consultant, to drive Advisory Services delivery/revenue growth and capture security program services within the customer account portfolio.

You will be a trustworthy and experienced leader who leverages your knowledge, skills, and experience to assist in the definition of the service catalogue and deliver exceptional advisory services to ePlus clients. Your primary responsibilities will be program consulting, technical and leadership tasks and include providing guidance and mentorship to the consulting team. Responsibilities include refining existing Practice offerings, developing new Practice offerings, assisting with pre-sales activities, and performing programmatic assessments along with on-going advisement services for our clients.

Your Impact

The essential functions of this position include:

• Business objectives; identified cyber risks, data risks, and regulatory requirements. Map these to ePlus security and data governance services to achieve measurable improvements in security posture, compliance, and information lifecycle management. Leverage the broader team to support these services as appropriate.

• Effectively lead engagements as a subject matter expert (SME) to deliver client projects. Lead meetings, track team tasks, and present deliverables to client stakeholders across executive, operational, and technical audiences.

• Conduct security and data governance program assessments and measure the effectiveness of client environments as it relates to:

• Existing technical and administrative controls

• Data classification and handling practices

• Data lifecycle management

• Privacy and regulatory compliance requirements

• Alignment to industry security and governance frameworks

• Design, develop, and operationalize Data Governance Programs, including:

• Governance charters and operating models

• Data ownership and stewardship models

• Data classification frameworks

• Data retention and disposition standards

• Policy and control documentation

•