Consulting Manager - SOC 2 & ISO 27001 Services

We are seeking a highly motivated and experienced Consulting Manager to lead and deliver cybersecurity compliance consulting services focused on SOC 2, ISO/IEC 27001, and related frameworks. This role is ideal for a professional with strong client-facing experience, deep understanding of security and compliance requirements, and the ability to guide organizations through complex compliance journeys. The Consulting Manager will manage client engagements end-to-end, oversee delivery teams, and serve as a trusted advisor to executive stakeholders.

Key Responsibilities

Engagement Leadership

· Lead multiple SOC 2 and ISO/IEC 27001 consulting and advisory engagements simultaneously.

· Serve as the primary point of contact for clients, managing communications, expectations, and overall engagement success.

· Develop tailored compliance roadmaps aligned with client business objectives and regulatory requirements.

Technical & Advisory Expertise

· Provide subject matter expertise on SOC 2 Trust Services Criteria, ISO/IEC 27001 requirements, and related security frameworks (e.g., NIST CSF, HITRUST, HIPAA).

· Guide clients in the design, implementation, and optimization of information security compliance frameworks such as ISO 27001 and SOC 2.

· Perform gap assessments, risk analyses, and readiness reviews to prepare clients for audits and certifications.

· Perform SOC 1, and SOC 2 audits.

Project & People Management

· Oversee day-to-day project delivery, ensuring timelines, budgets, and quality standards are met.

· Mentor and coach junior consultants, providing guidance on methodologies, client management, and professional growth.

· Contribute to the development of methodologies, templates, and best practices for consistency and efficiency across engagements.

Business Development & Growth

· Partner with leadership and sales teams to scope new opportunities, develop proposals, and support client presentations.

· Identify opportunities to expand relationships and cross-sell additional advisory services.

· Represent the firm in industry events, webinars, and thought leadership initiatives.

Qualifications

Education & Credentials

· Bachelor’s degree in Information Security, Information Technology, Business, or related field (Master’s preferred).

· Relevant certifications strongly preferred (e.g., CISA, CISM, CISSP, ISO 27001 Lead Implementer/Auditor).

Experience

· 6–10 years of experience in cybersecurity, IT risk, or compliance consulting, with at least 3 years in a client-facing consulting manager or engagement lead role.

· Proven expertise in SOC 2 and ISO/IEC 27001 frameworks, including readiness, remediation, and certification support.

· Experience working with CPA firms, auditors, or registrars is a plus.

Skills

· Strong understanding of information security governance, risk management, and compliance practices.

· Excellent communication and presentation skills, with the ability to engage both executive and technical audiences.

· Demonstrated leadership, project management, and team mentorship capabilities.

COMPENSATION & BENEFITS

· Base Salary + Bonus

· Company Paid Health Insurance

· Company Paid Dental Insurance

· Company Paid Vision Insurance

· 401k with 3% Company Contribution (Traditional & Roth Options)

· Generous Vacation Policy