At Ferrilli, we drive positive changes in higher education through technology. Our mission is to enhance student success by optimizing campus IT infrastructure and implementing innovative solutions. With a holistic approach, we provide expert IT services and consulting, to help clients achieve their goals.
This role is based in the Philippines and will follow a hybrid work setup. Working hours for this role are aligned with U.S. business hours to ensure seamless collaboration with our clients and teams.
POSITION SUMMARY
We are seeking a highly skilled and client-focused Cybersecurity Consultant to deliver cybersecurity assessments, advisory services, and remediation planning to our higher education clients. The ideal candidate will have a strong technical background combined with a consultative mindset, capable of translating complex security needs into actionable solutions for IT leaders, compliance teams, and institutional stakeholders.
RESPONSIBILITIES
- Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations aligned with frameworks such as NIST 800-171, GLBA, and ISO 27001.
- Support clients in the development of security roadmaps, policies, procedures, and incident response plans tailored for academic environments.
- Evaluate existing controls and recommend improvements across areas including identity and access management (IAM), endpoint protection, network security, and cloud security (e.g., Microsoft 365, AWS, Google Workspace).
- Assist institutions with preparation for audits and regulatory compliance (e.g., GLBA Safeguards Rule, PCI DSS, FERPA, HIPAA).
- Conduct internal and external penetration tests and perform vulnerability scans to identify, assess, and report on security weaknesses across network, application, and endpoint systems.
- Provide advisory services on the implementation of security technologies and secure architecture design.
- Deliver executive-level briefings and technical documentation to IT and administrative leadership.
- Stay current on emerging threats, vulnerabilities, and compliance requirements affecting the higher education sector.
- Contribute to internal knowledge sharing and continuous improvement of service offerings.
QUALIFICATIONS
Required:
- Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
- 3+ years of experience in cybersecurity consulting, risk assessments, or information security roles.
- Strong knowledge of NIST Cybersecurity Framework, NIST 800-171, CIS Controls, and/or ISO 27001.
- Familiarity with higher education IT environments, systems, and organizational structures.
- Excellent communication, documentation, and stakeholder engagement skills.
- Experience with Microsoft Entra ID (Azure AD), M365 security tools, or other enterprise solutions.
Preferred:
- Industry certifications (e.g., CISSP, CISA, CISM, GIAC, CCSP, or similar).
- Experience working in or consulting for colleges and universities.
- Knowledge of GLBA, FERPA, and HIPAA regulatory frameworks.
- Experience supporting security incident response or security operations.
