We are seeking an experienced and analytical Cyber Risk Consultant to help enterprise clients assess, manage, and mitigate cybersecurity risks. This role focuses on developing and implementing enterprise-wide risk management frameworks, ensuring compliance with regulatory standards, and improving overall security posture.
Key Responsibilities :
- Conduct enterprise-level cyber risk assessments and maturity evaluations.
- Identify and analyze security risks to critical assets, systems, and data across IT and OT environments.
- Develop and implement cyber risk management frameworks aligned with industry standards (, NIST CSF, ISO , CIS Controls).
- Provide guidance on regulatory compliance (, GDPR, HIPAA, SOX, PCI-DSS, CCPA) and industry-specific requirements.
- Create and maintain risk registers, control matrices, and risk treatment plans.
- Facilitate risk workshops and collaborate with stakeholders across security, IT, legal, and compliance teams.
- Deliver executive-level reports and recommendations on risk mitigation strategies and security program enhancements.
- Support internal and external audit processes, control testing, and third-party risk assessments.
Required Qualifications :
Bachelor's degree in Cybersecurity, Information Systems, Risk Management, or related field.years of experience in cybersecurity risk management or compliance consulting roles.Strong understanding of cyber risk methodologies, threat modeling, and enterprise risk frameworks.Experience with GRC tools (, Archer, OneTrust, ServiceNow GRC, MetricStream).Working knowledge of regulatory and standards frameworks : NIST, ISO, CIS, COBIT, GDPR, HIPAA, SOX, etc.Ability to communicate complex risk issues to technical and non-technical audiences, including C-suite stakeholders.Preferred Qualifications :
Professional certifications such as CRISC, CISA, CISSP, CISM, or ISO Lead Implementer / Auditor.Experience in large enterprise or consulting environments.Familiarity with cloud risk management (AWS, Azure, GCP).Soft Skills :
Strong analytical and critical thinking abilities.Excellent written and verbal communication.Ability to work independently and collaboratively in cross-functional teams.High level of integrity and professional ethics.