Senior Cyber Security Consultant

About Us

At Ferrilli, we specialize in providing strategic IT and cybersecurity services to colleges and universities across the country. With a deep understanding of the unique challenges faced by higher education institutions, we help our clients secure their environments, meet compliance mandates, and build resilient cybersecurity programs that support teaching, learning, and research.

Position Summary

We are seeking a highly skilled and client-focused Cybersecurity Consultant to deliver cybersecurity assessments, advisory services, and remediation planning to our higher education clients. The ideal candidate will have a strong technical background combined with a consultative mindset, capable of translating complex security needs into actionable solutions for IT leaders, compliance teams, and institutional stakeholders.

Key Responsibilities

• Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations aligned with frameworks such as NIST 800-171, GLBA, and ISO 27001.
• Support clients in the development of security roadmaps, policies, procedures, and incident response plans tailored for academic environments.
• Evaluate existing controls and recommend improvements across areas including identity and access management (IAM), endpoint protection, network security, and cloud security (e.g., Microsoft 365, AWS, Google Workspace).
• Assist institutions with preparation for audits and regulatory compliance (e.g., GLBA Safeguards Rule, PCI DSS, FERPA, HIPAA).
• Conduct internal and external penetration tests and perform vulnerability scans to identify, assess, and report on security weaknesses across network, application, and endpoint systems.
• Provide advisory services on the implementation of security technologies and secure architecture design.
• Deliver executive-level briefings and technical documentation to IT and administrative leadership.
• Stay current on emerging threats, vulnerabilities, and compliance requirements affecting the higher education sector.
• Contribute to internal knowledge sharing and continuous improvement of service offerings.

Qualifications

Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 3+ years of experience in cybersecurity consulting, risk assessments, or information security roles.
• Strong knowledge of NIST Cybersecurity Framework, NIST 800-171, CIS Controls, and/or ISO 27001.
• Familiarity with higher education IT environments, systems, and organizational structures.
• Excellent communication, documentation, and stakeholder engagement skills.
• Experience with Microsoft Entra ID (Azure AD), M365 security tools, or other enterprise solutions.

Preferred:

• Industry certifications (e.g., CISSP, CISA, CISM, GIAC, CCSP, or similar).
• Experience working in or consulting for colleges and universities.
• Knowledge of GLBA, FERPA, and HIPAA regulatory frameworks.
• Experience supporting security incident response or security operations.

Travel Requirements

• Occasional travel to client campuses may be required, depending on engagement scope.

Why Join Us?

• Work with mission-driven institutions and make a direct impact on student and faculty success.
• Join a collaborative team of cybersecurity professionals dedicated to higher education.
• Enjoy flexible remote work, meaningful projects, and professional development support.