Senior Strategic Security Advisor

Be the security advisor customers trust when compliance gets complicated. Defense contractors are racing toward CMMC readiness. Financial institutions are answering to examiners. Healthcare organizations are protecting patient data under HIPAA/HITECH. They all need someone who can turn frameworks and regulations into clear, practical guidance. At CIT, that's you.

This role might be a fit if you:

• Enjoy advising customers directly and owning the relationship, not just delivering a report and moving on
• Have worked with CMMC, NIST SP 800-171, FFIEC, or HIPAA/HITECH, and can explain them in plain language to executives
• Like the follow-through as much as the strategy: policies, risk evaluations, treatment options, and keeping initiatives moving

SUMMARY The Senior Strategic Security Advisor serves as a trusted cybersecurity partner for small to mid-sized organizations across the Greater Minneapolis-St. Paul metro area, providing practical guidance on security strategy, governance, risk management, and regulatory compliance. You own the advisory relationship and the follow-through on agreed initiatives, including developing policies, evaluating risks, recommending treatment options, and coordinating across CIT's internal teams and our customers' teams. The Strategic Security Advisor works with customers in regulated environments, including defense contractors pursuing CMMC readiness, financial institutions, and healthcare organizations, and brings working knowledge of frameworks such as NIST SP 800-171, FFIEC, and HIPAA/HITECH. You partner closely with CIT’s internal teams to build customer relationships, coordinate solutions, and keep customer initiatives moving. Customer leadership retains authority to approve policies, accept risks, and authorize investments, while your role is to give recommendations that are objective, clear, and in the customer’s best interest.

CORE FUNCTIONS

• Lead assigned customer advisory relationships, conduct recurring strategic reviews, and present clear recommendations to executive leadership and boards.
• Develop and maintain risk-based security roadmaps, coordinate milestones and stakeholders, track commitments, and escalate stalled initiatives.
• Conduct security and compliance assessments, maintain risk registers, and recommend and document risk mitigation, acceptance, transfer, or avoidance options.
• Draft and improve security policies, standards, incident response plans, and governance documentation, and guide customers through review and approval.
• Lead CMMC and Department of Defense readiness advisory work involving NIST SP 800-171, FCI/CUI scoping, SSPs, POA&Ms, control assessments, and evidence preparation.
• Advise financial institutions on FFIEC, FDIC, NCUA, OCC, GLBA, and CRI-related security expectations, and support healthcare customers with HIPAA/HITECH requirements.
• Recommend risk-based improvements to security controls, third-party risk, resilience, incident preparedness, and remediation priorities in partnership with CIT technical teams.
• Collaborate proactively with CIT account managers, customer success, and services teams to coordinate solutions and maintain customer momentum.
• Support qualified presales conversations and identify opportunities to address customer governance gaps through additional services, while maintaining objective recommendations.

REQUIRED QUALIFICATIONS

• Five or more years of experience in cybersecurity, governance, risk and compliance, or IT consulting, including customer-facing advisory responsibilities.
• Strong practical knowledge of CMMC and NIST SP 800-171, with experience developing or evaluating assessment evidence, SSPs, POA&Ms, or remediation plans.
• Knowledge of financial-sector cybersecurity requirements and supervisory expectations, including FFIEC guidance and FDIC, NCUA, or OCC-regulated environments.
• Experience with risk assessments, policy development, security frameworks, regulatory interpretation, and practical risk treatment recommendations.
• Broad understanding of enterprise infrastructure, cybersecurity controls, and incident preparedness.
• Excellent written and verbal communication, executive presentation skills, proactive account ownership, and ability to collaborate across multiple teams.
• Ability to travel to customer sites within the Minneapolis-St. Paul, Minnesota metro area approximately 1-2 times per quarter.
• Must be authorized to work in the United States.

PREFERRED QUALIFICATIONS

• Eight or more years of relevant experience, including an MSP/MSSP, consulting, or vCISO/advisory environment.
• CISSP, CISM, CISA, CRISC, relevant CMMC credentials, or an advanced degree in a related field.
• Experience advising defense contractors, regulated financial institutions, healthcare organizations, or boards of directors.
• Based in the Minneapolis-St. Paul, Minnesota metro area.

PAY INFORMATION

This is an exempt, salaried position with a pay range of $145,000–$185,000 annually. Actual compensation is determined based on experience, qualifications, and internal equity. At CIT, we strive to offer fair and competitive pay by considering both individual and market factors.

BENEFITS

CIT offers competitive benefit, wage, and incentive programs. Benefits include but are not limited to: medical, dental, vision, life & disability insurance, 401(k) with matching employer contribution, flexible work schedules, paid volunteer & parental leave time, flexible paid time off policy, and an employer sponsored rewards & recognition program.

EQUAL OPPORTUNITY STATEMENT

CIT is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment, regardless of their race, color, creed, religion, ancestry, national origin, sex, affectional preference, gender identity, disability, age, marital status, veteran status, status with regard to public assistance, or any other legally protected characteristics.

ABOUT COMPUTER INTEGRATION TECHNOLOGIES, INC. CIT helps business and IT leaders get dependable operations, predictable security, and a clear path to growth. Founded in 1992, we work as an extension of our customers’ teams, bringing certified expertise and clear, straightforward communication. Our goal has stayed the same from day one: make technology clear, understandable, and painless for business. We do that through managed IT, cybersecurity, cloud, physical security, and custom solutions that fit each customer’s real needs.

OUR VALUES

• Our People: Collaborative, Passionate, and Accountable. We invest in our team to ensure our customers always work with an expert who genuinely cares about their success.
• Our Passion: Is Our Customers. Their success is our driving metric. We treat every relationship as a long-term strategic partnership.
• Our Culture: Based on a Work/Life Balance. Our positive and fun culture translates directly into more energetic and engaged support for our customers.
• Our Integrity: Key to Our Success. We operate with total transparency, building long-term trust through honest dialogue and reliable results.
• Our Solutions: Innovative and Customized. We reject the one-size-fits-all approach, designing bespoke technology solutions for our customers’ unique business needs.