GM
Director of Cybersecurity, Governance, Risk and Compliance
Gross Mendelsohn
$175–275K / year · South Baltimore, Baltimore, Maryland, US
South Baltimore, Baltimore, Maryland, US (Hybrid)1 open job
CPA and advisory firm with in-house technology practice covering ERP, cloud modernization, managed IT, and cybersecurity compliance for private businesses and nonprofits.
Gross Mendelsohn is a full-service CPA and advisory firm, but the part that matters here is the in-house technology group: ERP systems, cloud modernization, managed IT, and cybersecurity compliance. The threat model is not a red-team lab. It is the practical exposure of privately held businesses, nonprofit organizations, and their owners - regulated data, aging ERP deployments, cloud migrations mid-flight, and audits that surface control gaps after the fact. The firm's security work sits inside that stack, tied to accounting, tax, and audit and assurance engagements rather than sold as a standalone product.
The technology consulting practice covers ERP implementation and modernization, managed IT operations, and compliance work - meaning the day-to-day domains are identity and access around financial systems, cloud configuration, endpoint and network hygiene, and the documentation trail that audit and assurance teams actually ask for. Forensic accounting and management advisory sit in the same building, which changes the shape of the job: findings feed directly into client remediation, valuation, and strategic planning conversations.
Client verticals include manufacturing and distribution, construction and real estate, government contracting, healthcare, nonprofit organizations, and service businesses - each with its own data-handling and compliance surface. Government contracting and healthcare in particular carry frameworks worth knowing before you apply. The operating style the firm describes is high partner contact, up-front communication, thorough planning, and integrated advisory rather than isolated tasks; expect client-facing work and written deliverables alongside the technical ones.
Offices are in Baltimore, Maryland, and Fairfax, Virginia.