Security Consultant

Job Summary The Security Consultant serves as a trusted advisor to healthcare clients, partnering with the Fortified vCISO team to advance organizational security maturity and reduce enterprise risk.

This role supports the development, execution, and continuous improvement of clients cybersecurity governance programs, aligning security strategy with business objectives, regulatory requirements, and evolving threat landscapes.

The Security Consultant evaluates security program effectiveness, identifies control gaps, and provides risk-based recommendations across administrative, technical, and operational domains.

Responsibilities include advisory support for strategic security initiatives, policy and standards development, corrective action planning, risk reporting and executive-level communication, and oversight of technology and control implementations to ensure alignment with organizational risk tolerance.

Working closely with clients and vCISOs, the Security Consultant translates technical findings into actionable governance and risk management improvements.

This role contributes to the design of sustainable security programs, supports board- and executive-level reporting, and helps guide clients toward measurable maturity improvements.

The ideal candidate brings a strong foundation in information security (healthcare preferred), demonstrates technical fluency across modern security architectures, and possesses the ability to lead risk-focused discussions with both technical teams and executive stakeholders.

Strong analytical skills, project leadership capability, and comfort operating in dynamic healthcare environments are essential.

Essential Job Functions The following duties are normal for this position.

The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position.

Other duties may be required.

Have an understanding of healthcare business operations, the healthcare cybersecurity landscape, and the healthcare regulatory environment.

Assist vCISOs in the identification and proposal of key information security priorities, initiatives, plans, practices, and tools.

Collaborate with various Fortified departments, Client stakeholders, and third parties to ensure a holistic approach to cybersecurity.

Research potential and emerging information security threats, vulnerabilities, and potential control techniques and communicate this information to client contacts.

Develop and mature cybersecurity risk management policies, procedures, standards, and operational runbooks to strengthen governance, ensure regulatory alignment, and support effective risk mitigation.

Engage with client security leadership and technical teams to evaluate control effectiveness, perform security testing, and provide actionable recommendations to remediate identified vulnerabilities.

Develop and mature Fortified-wide best practices for IT security.

Researc...