<p><strong>Job Title – Senior Associate Cybersecurity Consultant</strong></p> <p><strong>Department: Risk Advisory</strong></p> <p><strong>Reports to: Head of Cyber Risk Advisory</strong></p> <p><strong>Location: Remote </strong></p> <p><strong>Employment Type: Full Time</strong></p> <p><strong> </strong></p> <p><strong>Description</strong></p> <p>The Senior Associate Cybersecurity Consultant is responsible for supporting clients in strengthening cybersecurity, technology risk, and regulatory compliance programs. This role works directly with client stakeholders to assess cyber capabilities, develop strategic recommendations, and deliver solutions that enhance governance, risk management, and operational effectiveness.</p> <p>The ideal candidate combines strong cybersecurity knowledge with consulting, communication, and project management skills. They are intellectually curious, self-motivated, and excited to work in a dynamic environment where initiative, innovation, and professional growth are encouraged. </p> <p><strong>*This role involves some travel (20-30%) to attend team meetings, client engagements, and industry events. </strong></p> <p> </p> <p><strong>Senior Associate Cybersecurity Consultant<em> </em>Job Responsibilities: </strong></p> <ul> <li>Conduct cybersecurity and technology risk assessments across client environments.</li> <li>Perform cybersecurity maturity assessments and benchmark organizations against industry frameworks and leading practices.</li> <li>Develop cybersecurity strategies, operating models, policies, standards, and implementation roadmaps.</li> <li>Enable regulatory compliance, governance, and control improvement initiatives.</li> <li>Advise clients on emerging technology risks, including artificial intelligence (AI), cloud computing, and digital transformation initiatives.</li> <li>Develop executive-ready reports, presentations, and recommendations for senior leadership.</li> <li>Facilitate client workshops, interviews, and stakeholder discussions.</li> <li>Manage project work-streams and mentor junior team members.</li> <li>Support business development activities, proposal efforts, thought leadership, and practice development initiatives.</li> </ul> <p><strong> </strong></p> <p><strong>Who You Are:</strong></p> <ul> <li>At least 3+ years of experience in cybersecurity consulting, cyber risk, technology risk, information security, or related advisory services.</li> <li>Focus on customer service - <strong>We are passionate about going above and beyond to provide our customers with excellent service</strong>. We expect you to be of the same mindset.</li> <li>Demonstrated history of job stability – We invest a lot in our employees. We are looking for candidates who want a career, not a short-term gig.</li> <li>Accountability – You are reliable and take responsibility for the tasks assigned to you.</li> <li>Excellent written and oral communication skills.</li> <li>On occasion, we do require work outside of our standard business hours to accommodate client needs</li> </ul> <p> </p> <p><strong>Experience/Skills Required: </strong></p> <ul> <li>Experience in organizing and conducting cybersecurity risk assessments, maturity assessments, and compliance reviews.</li> <li>Experience in working with client management teams and briefing client leadership.</li> <li>Strong analytical, problem-solving, and critical thinking skills.</li> <li>Excellent written and verbal communication skills.</li> <li>Ability to translate assessment findings into actionable business recommendations.</li> <li>Experience in requirements gathering, reporting writing, interacting with client stakeholders and presenting findings to leadership.</li> <li>Demonstrated ability to manage multiple projects and priorities and deliver high-quality work in a fast-paced environment</li> </ul> <p> </p> <p><strong>Experience/Skills Preferred: </strong></p> <ul> <li>Cybersecurity strategy and governance</li> <li>Technology and cyber risk management</li> <li>Regulatory compliance and control assessments</li> <li>AI security and governance</li> <li>Cloud security</li> <li>Security metrics and reporting</li> <li>Cybersecurity operating model design</li> <li>Financial services, critical infrastructure, healthcare, or other highly regulated industries</li> <li>Familiarity with Frameworks and Standards <ul> <li>Various NIST Standards and Frameworks (e.g. SP 800-53, Cybersecurity Framework, etc.)</li> <li>Cyber Risk Institute (CRI) Profile</li> <li>ISO 27001</li> <li>ISO 31000</li> <li>PCI DSS</li> <li>CIS Critical Security Controls</li> <li>AI Risk Management Framework</li> <li>EU NIS-2, GDPR</li> <li>Various US State Level Security and Governance Frameworks</li> </ul> </li> </ul> <p> </p> <p><strong>Preferred Certifications</strong><strong>:</strong></p> <p>One or more of the following certifications are preferred:</p> <ul> <li>CISSP (Certified Information Systems Security Pro