Cyber Risk Advisory Consultant

S-RM•New York, NY

3d•$110,000 - $150,000•Remote

About The Position

S-RM is hiring a Cyber Risk Advisory Associate to serve as a senior delivery professional on client cybersecurity engagements. Working closely with engagement managers, the Associate develops tailored client solutions, provides senior expertise and leadership in delivering them, and supports analysts assigned to projects. The role is suited to cyber professionals with at least two years of experience who want exposure to varied projects, deepen their expertise, and develop their careers. Typical work includes delivering framework assessments, strategic advisory, training exercises, and threat intelligence assessments; overseeing technical implementation plans; coordinating subcontractors and internal teams; and, where needed, serving in a virtual CISO capacity. Associates also develop their cyber expertise with company support and share knowledge through internal initiatives and programs. Projects span multiple sectors, with opportunities to broaden security awareness through collaboration with incident response and ethical hacking practices. The role is listed as USA remote, and the company also describes hybrid working and flexible working options. Applicants must have permission to work in the United States by the start of employment. The full salary range is $110,000–$150,000, depending on experience and location.

Requirements

At least 2 years of cyber experience.
Previous experience in an information security role.
Excellent writing skills and attention to detail.
Confidence and experience presenting verbal updates to technical and non-technical stakeholders.
Demonstrable knowledge of security frameworks, standards, and control libraries such as CIS, ISO, and NIST.
Demonstrable knowledge of information security principles, tools, technologies, and techniques.
Demonstrable knowledge of security risk management methodologies.
Permission to work in the United States by the start of employment.

Nice To Haves

Prior consulting experience.
Academic cybersecurity or IT qualifications.
Industry accreditation such as SANS Institute, Security+, CISM, CISSP, or ISO 27001.
Technical capabilities in cloud computing, offensive security practices and techniques, or system administration.

Responsibilities

Play a senior delivery role on client engagements, including framework assessments, strategic advisory, training exercises, and threat intelligence assessments.
Work with engagement managers to develop tailored solutions for clients.
Provide senior expertise and leadership in delivering client solutions.
Support analysts working on assigned projects.
Oversee technical implementation plans and coordinate subcontractors and internal teams to deliver results on time.
Act in a virtual CISO capacity when required.
Develop cybersecurity expertise and share it with the wider team through internal initiatives and programs.

Benefits

20 days of annual holiday, in addition to 12 public holidays, with one additional day per service year up to a maximum of 25 days.
Life insurance equal to four times annual salary.
Matching pension contribution up to 6%, with up to 12% combined contributions, and financial education.
Military leave for up to five years.
Hybrid working and flexible working hours.
Fertility treatment leave: five days per treatment cycle per year.
Maternity leave: 26 weeks of full pay followed by 13 weeks of half pay.
Paternity leave: six weeks of full pay.
Company-paid private medical, dental, and vision insurance for the employee, partner, and children.
Gym discounts for the employee and partner.
Employee Assistance Program for the employee and immediate family.
Free access to Headspace mindfulness app.