Senior Associate, Cyber Risk Advisory
Core
Assess cybersecurity program maturity against industry frameworks, evaluate regulatory readiness, and develop prioritized future-state roadmaps for Boards and management teams.
Role type
Senior IC cyber risk advisory consultant
Builds
Cybersecurity program assessments, compliance roadmaps, and risk reduction strategies
Domain
Cybersecurity consulting and regulatory compliance
Deliverable
client delivery
Required skills
Cybersecurity program assessment, regulatory compliance evaluation, roadmap development, stakeholder interviewing, workshop facilitation, risk prioritization
Preferred skills
Knowledge of NIST CSF 2.0, ISO/IEC 27001, NIST SP 800-53, CIS Controls, sector-specific requirements (healthcare, finance), AI security governance
Technologies
NIST CSF 2.0, ISO/IEC 27001, NIST SP 800-53, CIS Controls, GDPR, CCPA, NYDFS, HIPAA, PCI-DSS
Responsibilities
Plan and execute cybersecurity program assessments to evaluate current-state maturity against frameworks and develop future-state recommendations and roadmaps. Facilitate stakeholder interviews and workshops with CISOs, IT, risk, legal, and business leaders.