Cybersecurity Advisor II

Job description

**About Apollo** Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs. Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security. **Our Culture** We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver. **Position Overview:** The Cybersecurity Advisor II is an experienced, technically capable consultant who helps clients set and advance their cybersecurity strategy over long-term engagements. Beyond point-in-time assessment, the Advisor builds trusted, ongoing relationships — translating risk into a prioritized roadmap, guiding governance and framework alignment, and helping leadership make sound, business-aware security decisions. This role embodies Apollo’s intelligence-led, business-first approach: see clearly, secure wisely **Key Responsibilities:** - Serve as a trusted advisor to client stakeholders, helping define and advance cybersecurity strategy across multi-month and multi-year engagements. - Develop prioritized, business-aware security roadmaps that mature client posture over time. - Advise on governance, risk, and compliance — aligning programs to frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001, CMMC, HIPAA, or PCI DSS. - Translate technical risk into clear business language for executives and boards. - Own the advisory relationship for assigned clients, driving cadence, measurable progress, and demonstrable risk reduction. - Partner with assessors and engineers to ground recommendations in technical reality and validate remediation. - Guide clients through security program development — policy, process, architecture direction, and tooling strategy. - Support incident readiness, tabletop exercises, and post-incident program improvement as needed. - Contribute to the maturation of Apollo’s advisory methodology, frameworks, and deliverable templates. - Mentor junior team members and share knowledge across the practice. - Stay current with emerging threats, regulatory change, and the evolving security technology landscape. **Qualifications** - Required - Cybersecurity experience, including client-facing advisory, consulting, or security leadership - Demonstrated ability to develop and communicate cybersecurity strategy and roadmaps to executive audiences. - Deep working knowledge of one or more major frameworks (NIST CSF, CIS Controls, ISO 27001, CMMC) and how to operationalize them. - Strong understanding of security architecture, controls, and risk across on-premises and cloud environments. - Exceptional written and verbal communication; able to lead executive and board-level conversations. - Experience managing long-term client relationships and multiple concurrent engagements. - Ability to travel for work, up to 65% - Preferred - Senior certifications such as CISSP, CISM, CCSP, or CISA. - Prior vCISO, security manager, or security architect experience. - Experience in regulated industries or the public sector. - Familiarity with cloud security across Azure, AWS, GCP, and M365. **Expectations:** - At 30 days: - Complete onboarding to Apollo's advisory methodology, deliverable templates, and client engagement model - Shadow senior advisors and review at least two active client portfolios to calibrate Apollo's voice, delivery standard, and how technical findings get translated into executive-ready language - Meet your assigned clients, introduce yourself as their advisor, and establish a clear communication cadence and mutual understanding of engagement goals - Within 90 days: - Own the advisory relationship for assigned clients independently - Deliver at least one executive-ready artifact (roadmap update, risk briefing, board summary, or governance deliverable) that reflects Apollo's business-first approach and earns direct positive feedback from the client - Demonstrate working fluency across the frameworks relevant to your client portfolio (NIST CSF 2.0, CIS Controls, CMMC, or others) — not just familiarity, but the ability to operationalize and explain tradeoffs in client-specific terms - Build effective working relationships with Apollo's assessors and engineers — actively partnering to ground advisory recommendations in technical reality and validate remediation progress - By 180 days: - Carry a full portfolio of long-term advisory engagements with measurable, documented risk reduction across clients - Be recognized internally as a subject matter expert - Contribute at least one improvement to Apollo's advisory methodology, framework templates, or deliverable standards that gets adopted practice-wide - Demonstrate command of the regulatory and threat landscape relevant to Apollo's SLED and SMB clients **Company Values** We have created a fantastic corporate culture – our values drive our behaviors. Here are the expectations: - Passion for cybersecurity and a commitment to maintaining the highest standards of security. - Customer Outcomes: Their success is our success, we are business partners - Entrepreneurial Approach: fast decision making, empowerment, focus on results, test and learn - Win Together: Intense Collaboration, no silos - ​Integrity is paramount **Why You'll Love Working Here** - Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans - Unlimited PTO, 7 paid sick days, and 11 paid holidays - 401(k) with 4% company match after 90 days, immediately vested - Company‑paid life insurance at 1x annual salary - Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage - $125 monthly home‑office tech stipend for internet, equipment, and other technology needs - Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act. Apollo Information Systems is CJIS (Criminal Justice Information Services) compliant and requires all employees to complete a background check and obtain CJIS certification.