Principal Analyst, Cybersecurity Advisory Services at TekStream Solutions

Job description

Principal Analyst, Cybersecurity Advisory Services Location: Remote, US-based. Must be willing to accommodate east coast office hours. About the role TekStream is hiring a Principal Analyst, Cybersecurity Advisory Services to be the senior-most individual contributor in our Advisory Services practice. You'll report to the Director of Advisory Services, lead our most complex client engagements, and serve as the Director's go-to partner on delivery, methodology, and new offerings. This is a senior delivery role with room to grow into leadership. You'll lead engagements from discovery and workshops through requirements, documentation, and handoff, guide and mentor other consultants on your engagements, and help shape new offerings, including our AI governance practice. There are no direct reports on day one, but the role is a path to people management as the practice grows. You'll bring a broad, program-level view of cybersecurity, connecting work across identity, vulnerability management, cloud, detection and response, governance, and resilience. That breadth lets you build long-term roadmaps and break down the silos that keep security, IT, and the business from working toward the same goals. What you'll do Practice contribution • Serve as the Director's trusted partner on delivery, stepping in on client calls and engagement decisions when needed • Act as engagement lead on complex or high-visibility work, setting direction for the consultants and engineers on your engagements • Mentor and coach other consultants, review their deliverables, and help raise the quality bar across the practice • Support scoping, level-of-effort estimates, and statements of work with the Director and sales team • Build repeatable methods, templates, and standards so delivery scales beyond any one consultant • Help shape TekStream's AI governance practice and other new offerings, including how we package them Program strategy • Build multi-year cybersecurity roadmaps that sequence initiatives across domains based on risk, dependencies, and business priorities • Connect findings from assessments, tabletops, and implementations into a single program view for client leadership • Break down silos between security, IT operations, infrastructure, cloud, and business teams by facilitating shared goals, ownership, and decisions • Translate technical initiatives into business outcomes that executives can fund and track Client delivery • Lead stakeholder kickoffs, discovery sessions, and current-state assessments, and present findings to technical teams and executives • Facilitate user story workshops, document requirements, and produce target-state designs that client or TekStream engineering teams can build from • Oversee configuration requirements, build books, end-to-end workflow documentation, and SLA and exception handling processes • Build operationalization plans with clear ownership, cadence, and evidence so programs keep running after the engagement ends • Lead framework-based, custom, and targeted assessments, and turn findings into prioritized, achievable roadmaps • Design and facilitate tabletop exercises for cyber incident and cloud disaster recovery scenarios, and deliver after-action reports • Design and deliver training and knowledge transfer for operations, administration, and service management teams • Provide advisory support through pilot deployments and post-go-live stabilization Required qualifications • 8+ years in cybersecurity, IT risk, or IT service management, with at least 4 years in a client-facing consulting or advisory role • Broad knowledge across cybersecurity domains, including identity, vulnerability and exposure management, cloud security, detection and response, data protection, governance and risk, and resilience, and how they depend on each other • Experience building multi-year security roadmaps or program strategies for client or internal leadership • A track record of bringing siloed teams together around shared priorities and clear ownership • Experience leading engagements end to end, including client relationships, scope management, and deliverable quality • Experience mentoring or guiding other consultants or analysts, formally or informally • Proven experience leading requirements workshops and writing user stories, acceptance criteria, and requirements that engineering teams build from • Working knowledge of vulnerability management programs and the full vulnerability lifecycle, from detection to verified closure • Experience with IT service management processes, including incident, change, and CMDB, from a process design perspective • Hands-on experience performing framework-based, custom, and targeted assessments, using frameworks such as NIST CSF or ISO 27001 • Experience writing operational documentation such as runbooks, build books, process flows, RACI matrices, and SLA definitions • Strong facilitation skills with mixed audiences, from engineers to executives • Clear, concise written communication Preferred qualifications • Experience with penetration testing or application security, such as secure SDLC, threat modeling, or application testing • Experience with enterprise vulnerability management, patch management, and ITSM platforms, including the integrations between them • Experience designing or facilitating tabletop exercises, particularly for cloud disaster recovery scenarios • Familiarity with business impact analysis and business continuity planning • Exposure to AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, or ISO/IEC 42005 • Experience delivering training or knowledge transfer to operations teams • Certifications such as CISSP, CISM, CISA, CRISC, or ITIL 4 Foundation What success looks like • The Director can hand you a complex engagement and trust it will land • Clients leave with a roadmap their security, IT, and business teams agree on and fund • Teams that used to work in silos share priorities and hand off work cleanly • Consultants on your engagements get better because they worked with you • Engagements land on scope, budget, and timeline • Clients finish engagements with programs their own teams can run, not documents that sit on a shelf • Engineering teams build from your requirements without needing to come back for clarification • Client executives trust your judgment and ask for you on follow-on work • You leave a visible mark on how TekStream packages and delivers advisory and AI governance work

Requirements

Must-haves

Principal Analyst, Cybersecurity Advisory Services
Location: Remote, US-based. Must be willing to accommodate east coast office hours.
Practice contribution
Serve as the Director's trusted partner on delivery, stepping in on client calls and engagement decisions when needed
Act as engagement lead on complex or high-visibility work, setting direction for the consultants and engineers on your engagements
Mentor and coach other consultants, review their deliverables, and help raise the quality bar across the practice
Support scoping, level-of-effort estimates, and statements of work with the Director and sales team
Build repeatable methods, templates, and standards so delivery scales beyond any one consultant
Help shape TekStream's AI governance practice and other new offerings, including how we package them
Program strategy
Build multi-year cybersecurity roadmaps that sequence initiatives across domains based on risk, dependencies, and business priorities
Connect findings from assessments, tabletops, and implementations into a single program view for client leadership

Nice-to-haves

Experience with penetration testing or application security, such as secure SDLC, threat modeling, or application testing
Experience with enterprise vulnerability management, patch management, and ITSM platforms, including the integrations between them
Experience designing or facilitating tabletop exercises, particularly for cloud disaster recovery scenarios
Familiarity with business impact analysis and business continuity planning
Exposure to AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, or ISO/IEC 42005
Experience delivering training or knowledge transfer to operations teams
Certifications such as CISSP, CISM, CISA, CRISC, or ITIL 4 Foundation
What success looks like
The Director can hand you a complex engagement and trust it will land
Clients leave with a roadmap their security, IT, and business teams agree on and fund
Teams that used to work in silos share priorities and hand off work cleanly
Consultants on your engagements get better because they worked with you

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goai

Platform: bullhorn
Effort: medium