Cyber Risk Consultant

Basic Qualifications

• Minimum 7 years of hands-on experience in Cybersecurity Risk Management, Technology Risk, Information Security, or Cybersecurity Governance.
• Minimum 7 years of experience working within the Financial Services, Banking, Insurance, Brokerage, or other highly regulated industry.
• Minimum 5 years of experience identifying technology risks, defining cybersecurity control requirements, identifying control gaps, and proposing risk mitigation strategies.
• Minimum 5 years of experience conducting cybersecurity risk assessments, technology reviews, and control assessments.
• Minimum 5 years of experience across cybersecurity domains including IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, and Compliance.
• Minimum 5 years of experience with cybersecurity control frameworks such as NIST, ISO 27001, or equivalent industry frameworks.
• Minimum 3 years of experience assessing cybersecurity risks associated with AI, Machine Learning, Generative AI, or other emerging technologies.
• Minimum 3 years of experience evaluating AI and Machine Learning architectures, associated cybersecurity risk vectors, data protection risks, and evaluation methodologies.
• Minimum 3 years of experience with third-party or vendor cybersecurity risk assessments and due diligence.
• Minimum 3 years of experience supporting BISO, Cyber Risk, Technology Risk, Information Security Governance, or Enterprise Risk Management functions.
• Minimum 3 years of experience managing technology evaluation requests, cyber risk intake processes, BISO intake requests, or similar cybersecurity governance workflows.
• Strong understanding of cybersecurity risk identification, control assessment, risk remediation, risk acceptance, issue management, and risk reporting.
• Strong communication and stakeholder management skills with the ability to communicate complex cybersecurity and technology risk concepts to both technical and non-technical audiences.
• Strong experience facilitating working sessions and collaborating with Cyber SMEs, technology teams, business stakeholders, and senior leadership.
• Minimum 5 years of experience working independently, managing multiple priorities, and delivering tasks within project timelines.