Director, Cyber Strategy and Risk Advisory, vCISO

Kroll • New York, NY

6d • $200,000 - $250,000 • Remote

About The Position

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel.

Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and high-profile matters in the world. With experts based globally and supported by advanced technology, we help protect our clients’ data, people, operations, and reputation through assessments, investigations, intelligence, and strategic advisory services.

Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, framework assessments, expert testimony, privacy program building and a myriad of other advisory efforts.

We are seeking a Director to help lead and grow Kroll's US Virtual CISO and Cyber Advisory practice. This individual will serve as a strategic security leader for a portfolio of clients, acting as a trusted advisor to executive leadership teams, boards, and security stakeholders.

The successful candidate will be responsible for delivering and scaling Virtual CISO services, helping organizations strengthen governance, mature security programs, manage cyber risk, improve resilience, and align cybersecurity investments with business objectives. The role combines executive advisory, program leadership, client relationship management, team leadership, and business development.

Requirements

• Significant experience in cybersecurity consulting, cyber risk management, information security, technology risk, AI Security/Governance, resilience, regulatory advisory, and/or related professional services roles.
• Strong experience serving in a CISO, Deputy CISO, Head of Security, Security Director, vCISO, or senior cybersecurity consulting leadership role.
• Demonstrated ability to engage directly with boards, executive leadership teams, regulators, auditors, investors, and client stakeholders.
• Experience designing, leading, operating or transforming enterprise cybersecurity programs.
• Strong understanding of cybersecurity governance, operating models, technology risk, resilience, third-party risk, incident preparedness and security leadership.
• Proven ability to translate technical cybersecurity issues into business-focused risk and investment decisions.
• Strong knowledge of cyber strategy, governance, risk management, security operating models, control frameworks, incident readiness, third-party risk, cyber resilience, and security program maturity.
• Experience advising clients on leading cybersecurity frameworks, standards, and US regulatory or industry requirements, including NIST, ISO 27001, CIS Controls, SOC 2, NYDFS, FFIEC, HIPAA, SEC-related cyber disclosure considerations, and other relevant frameworks.
• Proven ability to engage confidently with senior executives, boards, CISOs, CIOs, legal counsel, risk leaders, and business stakeholders.
• Strong commercial mindset, with experience supporting business development, proposals, account growth, client relationship management, and market-facing initiatives.
• Experience leading, coaching, and developing teams as part of both client delivery and broader practice growth.
• Excellent written and verbal communication skills, with the ability to produce clear, executive-ready deliverables and present complex topics in a concise, business-focused manner.
• Ability to manage multiple engagements, priorities, deadlines, and stakeholders effectively.
• Ability to travel as required to support client delivery, business development, and internal initiatives.

Nice To Haves

• Above all, Kroll expects senior candidates to be strategic, commercially minded, intellectually curious, collaborative, and confident operating with senior clients.
• The successful candidate will be comfortable moving between board-level advisory, hands-on program design, team leadership, and business development.
• This is an opportunity to play a meaningful role in scaling Kroll’s US Cyber Strategy and Risk Consulting practice, helping clients address their most important cyber, technology, governance, and resilience challenges.

Responsibilities

• Serve as the designated Virtual / fractional CISO for a portfolio of clients across multiple industries.
• Act as a trusted advisor to boards, executive leadership teams, CISOs, CIOs, and risk leaders on cybersecurity strategy, governance, risk, resilience, and regulatory obligations.
• Provide ongoing cyber leadership and strategic guidance to clients lacking full-time CISO capabilities or requiring additional executive-level support.
• Develop and present cybersecurity roadmaps aligned to business objectives, risk appetite, regulatory requirements, and technology strategy.
• Deliver board and executive reporting on cyber risk posture, emerging threats, key initiatives, investment priorities, and program maturity.
• Lead security strategy development, governance transformation, risk management enhancements, cyber maturity assessments, and security operating model design.
• Advise clients on security organization structure, target operating models, staffing strategies, and capability development.
• Guide security investment planning, prioritization and budget justification activities.
• Support clients in developing and improving security policies, standards, governance frameworks and performance metrics.
• Lead advisory engagements relating to cyber resilience, third-party risk management, regulatory readiness, incident preparedness, security governance and operational resilience.
• Support executive management teams in cyber crisis preparation, tabletop exercises, incident response readiness, and recovery planning.
• Advise on AI governance, AI security, cloud security governance, technology risk management and emerging cyber risks.
• Lead cyber maturity assessments, security program reviews, risk assessments, and gap analyses against leading industry standards and frameworks such as NIST CSF, ISO 27001, CIS Controls, SOC 2, FFIEC, NYDFS Cybersecurity Regulation, SEC cyber disclosure expectations, HIPAA, and other relevant US regulatory or sector-specific requirements.
• Identify opportunities to expand vCISO relationships into broader cybersecurity, resilience, technology risk and compliance engagements.
• Support proposal development, client presentations, account planning and strategic growth initiatives.
• Contribute to thought leadership and market-facing content focused on cybersecurity leadership, governance and executive risk management.
• Oversee delivery teams, manage engagement quality, review fieldwork and deliverables, and ensure outputs meet Kroll’s standards for technical depth, commercial relevance, and executive clarity.
• Mentor and develop consultants supporting vCISO and other adivisory engagements.
• Establish methodologies, playbooks, reporting models and quality standards for the vCISO service offering.
• Build strong relationships across Kroll’s global Cyber Risk business to bring the best of the firm to clients and support cross-border opportunities where relevant.
• Support capability growth across Kroll's broader Cyber Advisory practice.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed