Cybersecurity Advisor II

Position Overview:

The Cybersecurity Advisor II is an experienced, technically capable consultant who helps clients set and advance their cybersecurity strategy over long-term engagements. Beyond point-in-time assessment, the Advisor builds trusted, ongoing relationships — translating risk into a prioritized roadmap, guiding governance and framework alignment, and helping leadership make sound, business-aware security decisions. This role embodies Apollo’s intelligence-led, business-first approach: see clearly, secure wisely.

Key Responsibilities:

• Serve as a trusted advisor to client stakeholders, helping define and advance cybersecurity strategy across multi-month and multi-year engagements.
• Develop prioritized, business-aware security roadmaps that mature client posture over time.
• Advise on governance, risk, and compliance — aligning programs to frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, CMMC, HIPAA, or PCI DSS.
• Translate technical risk into clear business language for executives and boards.
• Own the advisory relationship for assigned clients, driving cadence, measurable progress, and demonstrable risk reduction.
• Partner with assessors and engineers to ground recommendations in technical reality and validate remediation.
• Guide clients through security program development — policy, process, architecture direction, and tooling strategy.
• Support incident readiness, tabletop exercises, and post-incident program improvement as needed.
• Contribute to the maturation of Apollo’s advisory methodology, frameworks, and deliverable templates.
• Mentor junior team members and share knowledge across the practice.
• Stay current with emerging threats, regulatory change, and the evolving security technology landscape.

Qualifications

• Required:
• Cybersecurity experience, including client-facing advisory, consulting, or security leadership.
• Demonstrated ability to develop and communicate cybersecurity strategy and roadmaps to executive audiences.
• Deep working knowledge of one or more major frameworks (NIST CSF, CIS Controls, ISO 27001, CMMC) and how to operationalize them.
• Strong understanding of security architecture, controls, and risk across on-premises and cloud environments.
• Exceptional written and verbal communication; able to lead executive and board-level conversations.
• Experience managing long-term client relationships and multiple concurrent engagements.
• Ability to travel for work, up to 65%.
• Preferred:
• Senior certifications such as CISSP, CISM, CCSP, or CISA.
• Prior vCISO, security manager, or security architect experience.
• Experience in regulated industries or the public sector.
• Familiarity with cloud security across Azure, AWS, GCP, and M365.

Expectations:

• At 30 days:
• Complete onboarding to Apollo's advisory methodology, deliverable templates, and client engagement model.
• Shadow senior advisors and review at least two active client portfolios to calibrate Apollo's voice, delivery standard, and how technical findings get translated into executive-ready language.
• Meet your assigned clients, introduce yourself as their advisor, and establish a clear communication cadence and mutual understanding of engagement goals.
• Within 90 days:
• Own the advisory relationship for assigned clients independently.
• Deliver at least one executive-ready artifact (roadmap update, risk briefing, board summary, or governance deliverable) that reflects Apollo's business-first approach and earns direct positive feedback from the client.
• Demonstrate working fluency across the frameworks relevant to your client portfolio (NIST CSF 2.0, CIS Controls, CMMC) — not just familiarity, but the ability to operationalize and explain tradeoffs in client-specific terms.
• Build effective working relationships with Apollo's assessors and engineers — actively partnering to ground advisory recommendations in technical reality and validate remediation progress.
• By 180 days:
• Carry a full portfolio of long-term advisory engagements with measurable, documented risk reduction across clients.
• Be recognized internally as a subject matter expert.
• Contribute at least one improvement to Apollo's advisory methodology, framework templates, or deliverable standards that gets adopted practice-wide.
• Demonstrate command of the regulatory and threat landscape relevant to Apollo's SLED and SMB clients.