Principal, Digital Advisory

Control Risks•New York, NY

7h•$220,000 - $250,000•Hybrid

About The Position

We seek an established consulting leader and expert to help manage and grow our Digital Risks consulting business globally, encompassing our threat intelligence, information protection and information security advisory and response capabilities. The successful candidate will have and will leverage at least ten years of expertise in consulting and/or industry roles, with experience planning and implementing cybersecurity and risk technology, operations, and controls. The successful candidate will contribute to the development, refinement, and execution of the Global Digital Risks consulting strategy, business development, opportunity capture and delivery, as a leader in the Digital Advisory team and working closely with Control Risks’ wider technology and security businesses.

Requirements

10+ years of relevant experience
Bachelor's degree in information security, computer science, or related field.
Demonstrated ability in an executive-level role to help manage and grow a cyber security consulting business, including a proven record of business development and sales.
Experience managing third parties and sub-contractors and working across business segments and practices at professional services organizations.
Demonstrated success in integrating cyber, forensics and analytics capabilities in a consulting context in support of corporate clients and external counsel.
Industry-recognized subject matter expertise in information security risk mitigation and cyber incident response.
Strong working knowledge of AI risk and governance, including AI use-case assessment, risk classification, accountability models, regulatory and ethical considerations, third-party AI risk, and the practical controls needed to support responsible AI adoption.
Familiarity with relevant cyber, technology risk and AI governance frameworks and standards, such as NIST, ISO 27001, ISO/IEC 42001, and emerging AI regulatory expectations.

Nice To Haves

Post graduate degree a plus.
Experience building or managing a cybersecurity program in industry.
Understanding of IT infrastructure, systems and controls and familiarity with data loss prevention.
Deep understanding of the application of computer forensics and knowledge of electronic discovery in cyber investigations.
Industry-recognized personal subject matter expertise in threat modeling, testing and use of analytics.
Spanish and/or Portuguese language proficiency.

Responsibilities

Contribute to the development, refinement and execution of the Control Risks Global Digital Risks consulting strategy, leveraging both Control Risks’ Security and Technology capabilities and market positions.
Coordinate closely with the Digital Risks consulting teams and leaders in other regions to ensure a globally consistent offering.
Help manage the Digital Risks Advisory business and contribute to performance, financial success and profitable revenue expansion globally, working closely with other Control Risks practices.
Maintain and build knowledge of industry trends and new technologies relevant to growing the Digital Risks team across all business lines (Advisory, Assurance, Threat Intelligence, and Incident Response).
Grow and improve / innovate on existing Digital service offerings, and assist in development of new service offerings.
Support the development and delivery of AI risk and governance advisory services, including AI use-case assessment, model and agent inventories, risk tiering, governance workflows, control design, monitoring and evidence capture for audit, regulatory and executive assurance purposes.
Cultivate relationships across the firm within other Control Risks business lines (within and outside of Digital) and our Clients & Market team, to go to market jointly as one firm, leverage existing client relationships and business leads from non-Digital client relationships, and expand Digital advisory services into ongoing, broader non-Digital Control Risks services.
Cultivate client relationships and accounts and become a trusted advisor by demonstrating a high level of partnership and commitment to client success.
Generate and deliver annual sales across Digital Risks and broader Control Risks’ offerings on a personal basis and support members of the Digital Risks team to deliver personal sales targets.
Work closely with other Control Risks account managers, subject matter experts and Marketing to craft and execute campaigns to build Control Risks’ market position and profile for Digital Risks.
Lead on proposals and engagement on emerging client opportunities.
Act as a senior project leader on complex engagements; exceed client expectations while identifying and mitigating business risks associated with projects.
Employ a structured, disciplined and flexible approach to project management to ensure complete client satisfaction and project profitability.
Oversee consistent gathering of client and project requirements and ensuring requirements are properly documented and managed.
Lead on threat identification and related frameworks and oversee incident analyses using technology experts and tools.
Become a trusted business advisor and subject matter expert globally for internal and external clients at the intersection of cyber, forensics and analytics.
Advise on high-profile, challenging and multi-jurisdictional matters particularly related to cyber response and investigations.
Introduce other Control Risks crisis management, security, technology, compliance and analytical capabilities and expertise when appropriate.
Develop executive-level recommendations, roadmaps and business cases that help clients improve cyber resilience, strengthen governance and make informed decisions on emerging technology risk.
Be ready to maintain direct line management and leadership for the Digital Risks team including recruitment, hiring, performance management and talent development.
Act as a key member of the Digital Risks departmental management team.
Mentor and guide junior consultants across the business.
Act as a representative to the global Digital Risks leadership team.