Senior Cybersecurity & Vulnerability Management Consultant

Software Guidance & Assistance, Inc. (SGA) is searching for a Senior Cybersecurity & Vulnerability Management Consultant for a contract-to-perm assignment with one of our premier Financial Services clients in Dallas, TX . Hybrid, 3 days onsite per week (potentially 4 days based on business needs).
Position Overview
The successful candidate will join the Office of the U.S. Chief Information Security Officer (CISO), supporting the U.S. Cybersecurity Program within a major financial institution. This role combines hands-on technical cybersecurity expertise with cyber risk management, security governance, and issue remediation. The consultant will provide oversight across key security domains, particularly Vulnerability Management, while partnering with Technology, Security, Risk, and Audit teams to strengthen controls, address security findings, and improve cybersecurity processes.
Responsibilities :

• Lead vulnerability management oversight activities, working with technology owners to assess vulnerabilities, remediation strategies, patching processes, and sustainable risk mitigation.
• Review cybersecurity and technology issues, develop and challenge management action plans, and drive remediation through successful closure.
• Provide technical guidance across infrastructure and security domains, including system configurations, patching, IAM, cloud technologies, automation, and orchestration.
• Oversee security control activities, particularly within Vulnerability Management and Identity & Access Management.
• Lead quarterly application inventory reviews, collaborating with application owners to validate system usage, configurations, ownership, and change management practices.
• Support Application Portfolio Management governance and ensure accurate technology classification and inventory information.
• Partner with Control Owners, Quality Assurance, second-line Risk, and Internal Audit teams to address findings and validate control effectiveness.
• Collaborate with U.S. and global cybersecurity, infrastructure, application, and business stakeholders.
• Provide technical cybersecurity expertise and support regulatory and internal risk management initiatives.

Required Skills :

• 10+ years of experience in Information Technology, Cybersecurity, or Cyber Risk.
• Strong hands-on knowledge of vulnerability management practices, including vulnerability assessment, prioritization, remediation, and validation.
• 3+ years of experience with systems architecture and operations, including system configurations, patch management, IAM, automation, orchestration, golden images, and/or cloud infrastructure.
• Experience with cybersecurity risk management, security controls, issue remediation, and technology governance.
• Ability to evaluate technical security issues and work with infrastructure and application teams to develop sustainable remediation solutions.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to work independently and collaborate across technical, risk, and business teams.

Preferred Skills :

• Experience within banking, financial services, or another highly regulated enterprise environment.
• Application security and application portfolio governance experience.
• Development or scripting experience, particularly Python or backend development.
• Data analysis skills using Excel and/or SQL.
• Relevant certifications such as CISSP, CCSP, OSCP, AWS, Google Cloud Platform, or equivalent.

By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
#LI-SG1