> Markdown version of [/jobs/ext/4706912-it-security-consultant](https://www.wearedevelopers.com/jobs/ext/4706912-it-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Consultant

- **Company:** AAFCPAs
- **Location:** United States (Remote available)
- **Salary:** $90,000 - $105,000
- **Contract:** Permanent contract
- **Skills:** HTML, Java (Programming Language), Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Burp Suite, C Sharp (Programming Language), Cyber Security, Computer Programming, Databases, Linux, Disaster Recovery, Information Technology Audit, Python (Programming Language), Network Security, Microsoft Office, Nmap, Oracle (Applications), Open Web Application Security, Remote Access Technology, Anti-Phishing, SQL Databases, Web Applications, Wireless Networks, Google Cloud, Cloud Platform System, IT General Controls (ITGC), Firewalls (Computer Science), Information Technology, Metasploit, Nessus, Gsuite, Qualys, Vulnerability Analysis
- **Published:** November 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=d99ffce4e43df164

## About the Role

* Bachelor's degree in Information Technology, Computer Science, or a related field (relevant experience may be substituted).
 * Experience in IT security, cybersecurity, IT auditing, or a related consulting role.
 * Strong analytical, organizational, and project management skills.
 * Knowledge of Windows, Active Directory, Linux, and Microsoft Office.
 * Understanding of cybersecurity principles, IT controls, and security assessment tools.
 * Excellent written, verbal, and presentation skills.
 * Strong client service skills and the ability to build lasting professional relationships.
 * Ability to manage multiple projects while maintaining discretion and confidentiality.
 * Authorization to work in the U.S. without sponsorship.

Bonus Points If You Have

 * Experience with cloud platforms such as Microsoft Azure, Google Cloud, AWS, or Oracle.
 * Familiarity with security tools such as Qualys, Nmap, Nessus, OpenVAS, Burp Suite, Metasploit, or similar platforms.
 * Experience with ISO 27001, SOC reporting, HIPAA, or other compliance frameworks.
 * Programming or database knowledge, including Python, Java, SQL, HTML, or C#.
 * Certifications such as CISA, CISM, Security+, CEH, or CISSP.

## Description

AAFCPAs is looking for a motivated, high-energy IT Security Consultant to join our growing Advisory Practice!

At AAFCPAs, we help clients bridge the gap between technology, operations and finance, reduce risk, and make smarter business decisions. As a trusted business advisor, our team delivers solutions that strengthen security, improve internal controls, and help organizations navigate an evolving technology landscape.

In this role, you'll work with a diverse range of clients and technologies, identifying security risks, evaluating IT controls, and recommending practical solutions. From cloud environments and networks to cybersecurity and infrastructure, you'll gain hands-on experience, tackle meaningful challenges, and grow your expertise.

What You'll Do

IT Security & Risk Assessments

 * Perform IT General Controls (ITGC) testing and assessments.
 * Conduct vulnerability assessments and penetration testing, including external, internal, web application (OWASP Top 10), and wireless testing.
 * Evaluate security configurations for firewalls, mobile device management, wireless networks, endpoint protection, Microsoft 365, and Google Workspace.
 * Assess network security, remote access, disaster recovery, and business continuity programs.
 * Review and evaluate IT policies, procedures, and risk management programs.
 * Conduct phishing assessments using security tools.

Client Engagement & Consulting

 * Support Managers in planning and delivering client engagements.
 * Conduct client interviews, evaluate controls, and document findings.
 * Develop practical recommendations to address security gaps and business risks.
 * Prepare workpapers, audit documentation, and client reports.
 * Communicate findings and recommendations to clients.
 * Help clients strengthen IT processes, meet compliance requirements, and align with industry frameworks.

Practice Development

 * Maintain and support information security tools and applications.
 * Research emerging technologies and security solutions.
 * Help improve security reporting, metrics, policies, and procedures.
 * Stay current on cybersecurity best practices, regulations, and industry standards.
 * Learn and practice the next generation of IT Security that involves Agents and AI.