About Fortress SRM
Fortress Security Risk Management – 2022 CRN Security 100 and Tech Elite 250 Managed Security Services Provider (MSSP) - is a nationally recognized full-spectrum cybersecurity firm dedicated to protecting clients from financial and operational disruptions caused by cyber-attacks. We enhance the security performance of our clients' people, processes, and technology.
With expansive IT security consulting experience as well as critical infrastructure cyber security knowledge and expertise, the Fortress team provides scalable and comprehensive, yet practical and affordable cybersecurity outcomes for its clients.
What makes FSRM a great place to work?
The people!
Any company can do what we do but it’s the people here who make us great. We are a brilliant, hard-working, respectful group who have each others backs and are pulling together to help our customers manage their risk!
Benefits
Of course FSRM offers competitive benefits such as medical, dental, vision, disability, life, critical illness & group accident insurances, flexible spending, health savings accounts 401k, legal & identity protection services. We also offer PTO and holiday pay.
Pay Equity
The concept of equal pay for equal work has been around forever. Pay bands and work roles are regularly reviewed at FSRM to ensure our team knows they are being paid fairly.
Career Paths
To help our associates know specifically what they can do to get better at their jobs and advance, we created detailed paths to guide them on their way. 22% of our associates earned promotions in the last year!
Training
We believe in investing in our teams learning & growth. Not only do we offer tuition reimbursement and compensation for certification expenses, but each Associate has 24/7/365 access to the Udemy learning Platform.
Diversity
In an industry known to be challenged with diversity, we are a work in progress. 11% of our workforce is female, 13% are minority & 17% are veterans. Our average associate is 39 years old and our average tenure is 5 years.
Job Openings:
Security Principal
Position Summary:
We are seeking an experienced Security Principal to join the Fortress SRM Team. This role will partner with Fractional CISOs and client stakeholders to assess, design, and mature cybersecurity programs across industries. The ideal candidate brings deep enterprise experience and regulatory knowledge to support risk assessments, strategy development, and secure adoption of emerging technologies.
This position plays a critical role in delivering advisory services, including framework-based assessments, incident response tabletop exercises, cybersecurity program design, metrics development, and third-party risk evaluations. The candidate should have demonstrated experience across enterprise environments with working knowledge of CMMC, PCI-DSS, Privacy regulations, and other regulatory frameworks.
Key Responsibilities:
- Partner with Fractional CISOs to deliver strategic advisory engagements tailored to client risk and compliance needs.
- Collaborate with Client Experience Managers, cross-functional teams, and sales to engage clients and ensure cybersecurity initiatives are aligned with business goals.
- Lead and execute security assessments aligned with frameworks such as NIST CSF, CMMC, PCI-DSS, ISO 27001, and others.
- Facilitate tabletop exercises with executive stakeholders to test and improve incident response readiness.
- Design and enhance cybersecurity programs, policies, procedures, and governance models.
- Assess and refine cybersecurity maturity models, metrics, and KPIs to guide continuous improvement.
- Conduct vendor due diligence and support third-party risk management processes.
- Provide strategic guidance on secure implementation of emerging technologies, including AI, cloud, and OT/IoT systems.
- Deliver executive-level reporting, presentations, and board-facing materials.
- Serve as a subject matter expert (SME) in regulatory compliance areas such as CCPA, GDPR, HIPAA, and industry-specific standards.
- Align advisory efforts with internal Fortress SRM service capabilities to ensure cohesive solution delivery.
Qualifications:
- 7+ years in cybersecurity consulting, risk advisory, or enterprise security leadership.
- Proven expertise in CMMC (Level 2+), PCI-DSS, privacy regulations, and enterprise compliance initiatives.
- Strong knowledge of NIST CSF, CIS Controls, ISO 27001, and cybersecurity risk methodologies.
- Hands-on experience leading tabletop exercises, risk assessments, and strategic program development.
- Familiarity with cybersecurity maturity models (e.g., C2M2, FAIR, NIST IR 8286).
- Effective communicator with executive presence and ability to simplify complex concepts.
- Relevant certifications such as CISSP, CISM, CISA, CDPSE, CRISC, or CIPP are highly desirable.
Core Competencies:
- Strategic and consultative mindset
- Strong interpersonal and communication skills
- Cross-functional collaboration and team leadership
- Deep technical and regulatory acumen
- Outcome-driven with a focus on client success
Why Join Us:
- Join a forward-thinking organization with a growing cybersecurity advisory practice.
- Work directly with executive leaders and Fractional CISOs across diverse industries.
- Influence the evolution of cybersecurity services and emerging tech integration.
- Competitive compensation, career growth, and a collaborative remote culture.
Finance Analyst/Lead
Finance Analyst/Lead
Position Summary:
We are seeking a highly analytical and detail-oriented Finance Analyst/Lead to support our growing Fortress SRM business. This role will play a critical part in driving financial transparency, operational efficiency, and strategic decision-making through accurate forecasting, budgeting, reporting, and transaction management.
Working closely with the VP of Operations and the parent company's finance leadership, the Finance Analyst/Lead will ensure alignment between day-to-day Fortress SRM operations and broader financial goals. This is a hybrid position with flexibility in schedule and scope based on the candidate's experience and availability.
Key Responsibilities:
- Partner with Fortress Executive Leadership and the Fulcrum IT Partner's (Fulcrum) Finance team to develop financial models, budgets, and forecasts aligned with strategic business plans.
- Support timely and accurate monthly, quarterly, and annual financial close processes.
- Prepare reporting to track KPIs such as Gross Margin, EBITDA, CAC, client profitability, and service-level metrics.
- Conduct daily and periodic financial transactions, including accounts payable, accounts receivable, vendor payments, invoicing, expense reimbursements and reconciliation.
- Collaborate to support project costing, pricing models, and ROI analysis.
- Track and manage Fortress-specific revenue and cost drivers (e.g., licensing, headcount utilization, and client SLAs).
- Coordinate with Fulcrum Finance team to align consolidated financial reporting, variance analysis, and audits.
- Monitor and analyze vendor and client contracts to ensure financial compliance and identify cost-saving opportunities.
- Participate in executive presentations with insights into financial performance, risks, and opportunities.
Qualifications:
- Bachelor's degree in Finance, Accounting, or related field (CPA or MBA is a plus).
- 3+ years of progressive experience in financial analysis, preferably in a technology, SaaS, or MSP/MSSP environment.
- Experience in executing financial transactions and maintaining accurate records.
- Strong proficiency in financial modeling, Excel, and tools such as Power BI, NetSuite, QuickBooks, or similar platforms.
- Demonstrated ability to manage multiple stakeholders and navigate hybrid organizational structures.
- Experience working in a growth-phase or acquisition-influenced company is a strong plus.
- Excellent communication skills, with the ability to simplify complex data for cross-functional audiences.
Why Join Us:
We are at a pivotal moment in our journey. Recently acquired by Fulcrum IT Partners, we are actively transforming and scaling our operations to support ambitious growth objectives. This is an exciting opportunity to join a cybersecurity organization in the midst of innovation, service expansion, and financial evolution.
As our Finance Analyst/Lead, you won't just be reporting numbers-you'll be helping shape the financial structure and discipline of a company reimagining how security services are delivered. If you're energized by transformation, autonomy, and having a real impact, this is the opportunity for you.