IT Security Consultant Jobs
IT Security Consultant jobs are open across financial services, healthcare, government contracting, and technology, from analyst-level to principal and advisory roles, with specializations in penetration testing, risk and compliance, and cloud security architecture. See the openings below and apply to the ones that match your experience.
Find IT Security Consultant JobsOverview
Showing 5 of 11+ IT Security Consultant jobs
The expected salary range for this position is between $77,000 and $125,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).
We also offer a competitive benefits package that includes:
- Medical, Dental, Vision, Life, AD&D, and Disability Insurance
- 401(k) Retirement Plan and 529 Education Savings Plan
- Flexible Spending & Health Savings Account
- Accident, Critical Illness, Hospital Indemnity Insurances
- Legal Insurance and Pet Insurance
- Employee Assistance Program, fitness and wellness benefits, and other firm benefits.
- Paid holidays, vacation, and sick time
Responsibilities:
Additional skills and responsibilities are defined below:
- Support consulting engagements that help clients strengthen IT governance, risk management, and internal control environments across enterprise applications, cloud platforms, and business systems.
- Advise clients on designing, implementing, and maturing IT controls that support regulatory compliance, operational effectiveness, and organizational objectives.
- Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
- Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
- Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
- Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
- Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements.
- Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
- Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
- Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities.
- Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development.
- Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
- Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings.
- Bachelor's degree from an accredited college/university
- Minimum of four years of experience in IT risk consulting, technology advisory, internal IT audit, IT compliance, or related consulting services
- Experience advising clients on improving and maturing IT governance, risk management, and internal control environments
- Experience leading IT control assessments, internal audits, or compliance evaluations involving enterprise applications, ERP systems, cloud technologies, or financial systems
- Strong understanding of IT General Controls (ITGCs), application controls, technology risk management, and control frameworks
- Experience working directly with client stakeholders, presenting recommendations, and managing consulting engagements
- Excellent written and verbal communication skills with the ability to translate technical concepts into business-focused recommendations
- Ability to manage multiple client engagements, priorities, and project teams in a consulting environment
- Ability to work onsite at client locations throughout the Washington, DC metropolitan area
- Ability to obtain and maintain a US Security Clearance (US Citizenship Required)
- Must have at least one professional certification such as CISA, CISSP, CRISC, CGEIT, Security+, CPA, or equivalent
- Experience supporting OMB A-123 IT evaluations within federal agencies
- Experience with Oracle, Oracle Cloud ERP, Oracle Federal Financials business applications
- Experience supporting cloud governance and security within AWS, Azure, Oracle Cloud Infrastructure (OCI), or Google Cloud Platform
- Experience implementing or administering Governance, Risk, and Compliance (GRC) platforms such as ServiceNow GRC, Diligent HighBond, or Archer
- Experience supporting FISMA, NIST Cybersecurity Framework, NIST SP 800-53, FedRAMP, or related federal compliance initiatives
- Bachelor's degree in information systems, Computer Science, Accounting, Business, Cybersecurity, or a related field from an accredited college/university
EEO Notice:
EEO Notice and Applicant Accommodation Requests
If you would like to request a reasonable accommodation, regarding accessibility of our website, a modification or adjustment of the job application or interview process due to a disability, please call 703-236-2391 or email accommodations@kearneyco.com. Please be advised that this contact information is for accommodation requests only and cannot be used to inquire about the status of an application.
Employee Polygraph Protection Act (EPPA)
The expected salary range for this position is between $77,000 and $125,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).
We also offer a competitive benefits package that includes:
- Medical, Dental, Vision, Life, AD&D, and Disability Insurance
- 401(k) Retirement Plan and 529 Education Savings Plan
- Flexible Spending & Health Savings Account
- Accident, Critical Illness, Hospital Indemnity Insurances
- Legal Insurance and Pet Insurance
- Employee Assistance Program, fitness and wellness benefits, and other firm benefits.
- Paid holidays, vacation, and sick time
Responsibilities:
Additional skills and responsibilities are defined below:
- Support consulting engagements that help clients strengthen IT governance, risk management, and internal control environments across enterprise applications, cloud platforms, and business systems.
- Advise clients on designing, implementing, and maturing IT controls that support regulatory compliance, operational effectiveness, and organizational objectives.
- Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
- Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
- Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
- Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
- Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements.
- Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
- Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
- Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities.
- Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development.
- Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
- Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings.
- Bachelor's degree from an accredited college/university
- Minimum of four years of experience in IT risk consulting, technology advisory, internal IT audit, IT compliance, or related consulting services
- Experience advising clients on improving and maturing IT governance, risk management, and internal control environments
- Experience leading IT control assessments, internal audits, or compliance evaluations involving enterprise applications, ERP systems, cloud technologies, or financial systems
- Strong understanding of IT General Controls (ITGCs), application controls, technology risk management, and control frameworks
- Experience working directly with client stakeholders, presenting recommendations, and managing consulting engagements
- Excellent written and verbal communication skills with the ability to translate technical concepts into business-focused recommendations
- Ability to manage multiple client engagements, priorities, and project teams in a consulting environment
- Ability to work onsite at client locations throughout the Washington, DC metropolitan area
- Ability to obtain and maintain a US Security Clearance (US Citizenship Required)
- Must have at least one professional certification such as CISA, CISSP, CRISC, CGEIT, Security+, CPA, or equivalent
- Experience supporting OMB A-123 IT evaluations within federal agencies
- Experience with Oracle, Oracle Cloud ERP, Oracle Federal Financials business applications
- Experience supporting cloud governance and security within AWS, Azure, Oracle Cloud Infrastructure (OCI), or Google Cloud Platform
- Experience implementing or administering Governance, Risk, and Compliance (GRC) platforms such as ServiceNow GRC, Diligent HighBond, or Archer
- Experience supporting FISMA, NIST Cybersecurity Framework, NIST SP 800-53, FedRAMP, or related federal compliance initiatives
- Bachelor's degree in information systems, Computer Science, Accounting, Business, Cybersecurity, or a related field from an accredited college/university
EEO Notice:
EEO Notice and Applicant Accommodation Requests
If you would like to request a reasonable accommodation, regarding accessibility of our website, a modification or adjustment of the job application or interview process due to a disability, please call 703-236-2391 or email accommodations@kearneyco.com. Please be advised that this contact information is for accommodation requests only and cannot be used to inquire about the status of an application.
Employee Polygraph Protection Act (EPPA)
IT Security Consultant Jobs by Experience Level
See All 11 IT Security Consultant Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Security Consultant JobsIT Security Consultant Job Market
Who's Hiring
What Employers Look For
The qualifications that appear most often in IT security consultant jobs.
- Three to seven years of hands-on information security or cybersecurity consulting experience
- Active CISSP, CISM, or CompTIA Security+ certification, or equivalent credential
- Experience conducting risk assessments, vulnerability scans, and penetration tests
- Working knowledge of compliance frameworks including NIST, ISO 27001, PCI-DSS, or HIPAA
- Proficiency with security tools such as SIEM platforms, endpoint detection, and vulnerability scanners
- Bachelor's degree in computer science, information systems, cybersecurity, or a related technical field
Tips for Your IT Security Consultant Job Search
Tailor your resume to each engagement type
IT security consultants are hired for distinct work, from red-team assessments to GRC programs to zero-trust architecture builds. Lead with the engagement type that matches each listing, not a generic security summary, so hiring managers can place you immediately.
List certifications in a dedicated section
Certifications like CISSP, CISM, CEH, and CompTIA Security+ carry real screening weight for it security consultant roles. Put them in their own section near the top of your resume so they're visible before a recruiter reads your experience.
Apply early to roles that fit
Migrate Mate lists it security consultant openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by industry vertical you know
Security consulting requirements shift meaningfully between HIPAA-regulated healthcare, PCI-scoped fintech, and FedRAMP-governed government contracts. Targeting roles in an industry where you already know the compliance framework shortens your ramp and strengthens your pitch.
Prepare a walk-through of a past assessment
Interviewers for it security consultant positions typically ask you to describe a vulnerability assessment or audit you led end to end. Prepare a concise narrative covering scope, methodology, findings, and how the client acted on your recommendations.
Negotiate scope before you negotiate rate
Before discussing compensation, clarify whether the role is project-based or staff augmentation, the expected travel percentage, and who owns deliverables. Those variables affect the real value of any offer and give you a stronger footing when you do get to rate conversations.
IT Security Consultant Jobs: Frequently Asked Questions
Which companies are hiring the most it security consultants?
HRAIT, Gartner, and Girikon are hiring the most it security consultants right now, with openings concentrated in Texas, Arizona, and Colorado, based on current listings on Migrate Mate as of November 2026. Demand is especially active at large consulting firms, federal contractors, and financial institutions expanding their security programs.
How many it security consultant jobs are remote?
About 88% of it security consultant openings are fully remote or hybrid as of November 2026, though the share varies by specialty. GRC, compliance advisory, and cloud security architecture roles tend to offer the most remote flexibility, while penetration testing and on-site audit engagements more often require client travel or in-person presence.
How do you become an it security consultant?
Start by building hands-on technical skills through roles in IT support, network administration, or security operations. Earn a recognized certification such as CompTIA Security+, then progress toward CISSP or CISM as your experience grows. Develop expertise in at least one compliance framework, build a portfolio of assessments or audit work, and move into a consulting engagement, either independently or through a firm.
How do you get hired as an it security consultant with little experience?
Entry points typically include junior analyst roles at managed security service providers, internal IT security positions at mid-size companies, or apprenticeships at consulting firms. Focus on earning a foundational certification, building lab experience with real tools, and contributing to open-source security projects or capture-the-flag competitions that demonstrate practical skills beyond your resume credentials.
What does the it security consultant interview process look like?
Most processes run three to four stages. An initial recruiter screen is followed by a technical interview covering threat modeling, vulnerability assessment methodology, and your experience with specific frameworks. A case-style round asks you to walk through a past engagement or assess a hypothetical scenario. Final rounds typically involve a panel with senior consultants or practice leads who evaluate communication and client-facing skills.
Where can I find and apply to it security consultant jobs?
You can find and apply to it security consultant jobs on Migrate Mate, which lists current openings from across the United States. Search for roles that fit your specialty and experience level, then apply directly to each listing that matches what you're looking for.
See All 11 IT Security Consultant Jobs
Find roles that match your experience and apply in just a few clicks.
Find IT Security Consultant Jobs