Job Title: Senior Product Owner
Location: Cincinnati, OH(Remote)
Duration: 24 Months + Extension
Bill Rate: $88/hour (C2C)
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Description:

We are seeking a highly experienced cybersecurity professional to lead cybersecurity risk assessments and security due diligence for acquired and integrating entities. This role will evaluate the end-to-end security posture across cloud, identity, endpoints, infrastructure, applications, and security operations, identify material risks and control gaps, and develop pragmatic, risk-based remediation and integration plans.
The ideal candidate will bring deep hands-on expertise in Microsoft Azure, Microsoft 365, Microsoft Entra ID, vulnerability management, combined with strong experience assessing enterprise security technologies and operating models. Experience with GCC High/FedRAMP environments and NIST-CMMC would be plus.

Key Responsibilities:  

Lead comprehensive cybersecurity risk assessments and due diligence for acquisitions and integrating entities.
Assess Azure and Microsoft 365 security architecture, configurations, privileged access, data protection, logging, monitoring, and security controls.
Evaluate Microsoft Entra ID, including MFA, Conditional Access, privileged identities, external identities, legacy authentication, and identity governance.
Assess vulnerability and patch management programs, including identification and prioritization of critical/high-risk vulnerabilities and exposures.
Evaluate endpoint, network, cloud, and enterprise security capabilities, including EDR, MDR, SIEM, vulnerability management, email security, PAM, and data protection.
Assess compliance and security maturity against NIST, CMMC, FedRAMP/GCC High, and applicable enterprise security standards.
Identify security gaps, quantify and prioritize risks, and develop risk-based remediation roadmaps with clear owners and target timelines.
Support post-acquisition security integration, ensuring acquired environments transition toward enterprise security standards and strategic security platforms.
Partner with infrastructure, cloud, application, IAM, compliance, and business teams to drive remediation to closure.
Develop clear executive-level risk reports, highlighting critical exposures, remediation priorities, dependencies, and residual risks.

Required Experience & Skills:

10+ years of cybersecurity experience, preferably including M&A security, cybersecurity assessments, or security architecture.
Deep knowledge of Azure Security, Microsoft 365 Security, Microsoft Entra ID, Defender, and cloud security architecture.
Strong experience with vulnerability management, EDR/MDR, SIEM, IAM/PAM, network security, and endpoint security.
Working knowledge of NIST CSF, NIST 800-53, CMMC, FedRAMP, and GCC High environments.
Ability to translate technical findings into business risk, remediation priorities, and executive-level recommendations.
Strong stakeholder management skills with the ability to work across security, IT, business leadership, and acquired entities.