Manager, Cloud Security

Work with a nationally ranked CPA and advisory firm that is passionate for what's next. Aprio has 30 U.S. office locations, one in the Philippines and more than 2,100 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Join Aprio's Risk Advisory and Assurance team and you will help clients maximize their opportunities.  Aprio is a progressive, fast-growing firm looking for a Manager to join their dynamic team. Aprio is seeking an experienced technical manager to lead our cloud security consultants serving small to enterprise organizations across the Defense Industrial Base. This manager role will guide our consultants who are assisting our clients through their CMMC Level 2 certification journey while ensuring our consultants have the right leadership support. Key Responsibilities: Compliance Consulting:

Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping

Prepare organizations for C3PAO assessments and provide certification readiness reviews

Manage resource allocation and workload distribution across concurrent client engagements

Cloud Security Solutions consulting:

Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.

Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..

Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements

Team Leadership & Practice Development:

Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels

Develop standardized methodologies, playbooks, and procedures for technical delivery

Establish quality assurance processes and peer review mechanisms for client deliverables

Create training programs to elevate team capabilities in CMMC and Microsoft security technologies

Foster culture of client success, technical excellence, and continuous learning

Practice Growth & Thought Leadership:

Identify opportunities to expand consulting services and develop new offerings

Contribute to business development activities and proposal responses

Represent the practice at client events

Develop thought leadership content on CMMC implementation best practices

Build relationships with Microsoft partners, C3PAOs, and industry organizations

Stay current on CMMC program updates and DoD cybersecurity requirements

Required Qualifications:

Bachelor’s degree in computer science, Information Security, or related field (Master's preferred)

10+ years of progressive in information security and compliance, with significant consulting experience

4+ years managing security consultants with proven track record of team productivity

Deep expertise in securing complex cloud environments, threat modeling, and risk assessment

Strong cross-functional collaboration skills, balancing security requirements with business objectives

Clear and persuasive communicator in both writing and verbal settings

Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams

Passionate about developing engineers' careers in a supportive yet challenging environment

5+ hands-on experience implementing Microsoft security solutions across varied environments

Experience translating technical requirements into business terms for non-technical stakeholders

Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)

Technical Competencies:

Azure and Azure Government cloud security configurations

Microsoft Defender suite deployment and optimization

Microsoft Purview, Azure Information Protection, and data classification strategies

Microsoft Sentinel and cost-effective SIEM alternatives

Identity and Access Management solutions (Azure AD, Conditional Access)

Network segmentation and boundary protection strategies

Security documentation and technical writing

Preferred Certifications:

CISSP, CISM, or equivalent security leadership certification

Additional relevant certifications (Security+, CISA, GCIH, GIAC)

Key Competencies:

Client Relationship Management: Build trust and credibility with stakeholders at all organizational levels

Adaptive Communication: Translate technical concepts for audiences from small business owners to enterprise CISOs

Scalable Solutions Design: Right-size security programs based on organizational maturity, resources, and risk tolerance

Business Acumen: Balance security requirements with operational realities and budget constraints

Project Leadership: Manage complex, multi-phase engagements with competing priorities and timelines

Mentorship: Develop junior consultants and elevate overall team capabilities

Problem-Solving: Navigate unique challenges across diverse client environments and technical landscapes