Senior Director, Cyber Strategy & Risk Advisory

Kroll • United States,

2d • $200,000 - $250,000

About The Position

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and high-profile matters in the world. With experts based globally and supported by advanced technology, we help protect our clients’ data, people, operations, and reputation through assessments, investigations, intelligence, and strategic advisory services. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, framework assessments, expert testimony, privacy program building and a myriad of other advisory efforts. We are seeking a Senior Director to help lead and grow our US Cyber Advisory practice. This individual will serve as a senior advisor to clients, lead high-impact engagements, team leader, develop trusted executive relationships, support business development, and help shape the continued growth of Kroll’s advisory offerings in the US market.

Requirements

• Significant experience in cybersecurity consulting, cyber risk management, information security, technology risk, AI Security/Governance, resilience, regulatory advisory, and/or related professional services roles.
• Demonstrated ability to lead complex client engagements, manage senior stakeholders, and deliver high-quality advisory work in a fast-paced consulting environment.
• Strong knowledge of cyber strategy, governance, risk management, security operating models, control frameworks, incident readiness, third-party risk, cyber resilience, and security program maturity.
• Experience advising clients on leading cybersecurity frameworks, standards, and US regulatory or industry requirements, including NIST, ISO 27001, CIS Controls, SOC 2, NYDFS, FFIEC, HIPAA, SEC-related cyber disclosure considerations, and other relevant frameworks.
• Proven ability to engage confidently with senior executives, boards, CISOs, CIOs, legal counsel, risk leaders, and business stakeholders.
• Strong commercial mindset, with experience supporting business development, proposals, account growth, client relationship management, and market-facing initiatives.
• Experience leading, coaching, and developing teams as part of both client delivery and broader practice growth.
• Ability to connect business strategy, cyber risk, technology, governance, controls, and regulatory expectations into practical recommendations.
• Excellent written and verbal communication skills, with the ability to produce clear, executive-ready deliverables and present complex topics in a concise, business-focused manner.
• Strong problem-solving skills, intellectual curiosity, attention to detail, and the ability to adapt quickly to new client challenges.
• Ability to manage multiple engagements, priorities, deadlines, and stakeholders effectively.
• Experience working with diverse and distributed teams.
• Ability to travel as required to support client delivery, business development, and internal initiatives.

Nice To Haves

• Above all, Kroll expects senior candidates to be strategic, commercially minded, intellectually curious, collaborative, and confident operating with senior clients. The successful candidate will be comfortable moving between board-level advisory, hands-on program design, team leadership, and business development.
• This is an opportunity to play a meaningful role in scaling Kroll’s US Cyber Strategy and Risk Consulting practice, helping clients address their most important cyber, technology, governance, and resilience challenges.

Responsibilities

• Lead the delivery of high-quality cybersecurity strategy, risk, AI / cybersecurity governance, and resilience advisory services to a portfolio of clients across varying size, scope, sector, and complexity.
• Serve as a trusted senior advisor to executive stakeholders, including CISOs, CIOs, General Counsel, risk leaders, boards, and senior management teams.
• Lead cyber maturity assessments, security program reviews, risk assessments, and gap analyses against leading industry standards and frameworks such as NIST CSF, ISO 27001, CIS Controls, SOC 2, FFIEC, NYDFS Cybersecurity Regulation, SEC cyber disclosure expectations, HIPAA, and other relevant US regulatory or sector-specific requirements.
• Design and enhance cybersecurity governance models, risk management programs, security operating models, control frameworks, policies, procedures, and cyber resilience roadmaps.
• Lead the development and implementation of strategic cyber programs including virtual CISO services, board advisory, third-party risk management, cloud and technology risk, incident readiness, cyber resilience, security testing governance, and AI risk and governance advisory.
• Work with clients’ security, technology, legal, compliance, and business teams to translate risk findings into practical, prioritized, and executable improvement plans.
• Oversee delivery teams, manage engagement quality, review fieldwork and deliverables, and ensure outputs meet Kroll’s standards for technical depth, commercial relevance, and executive clarity.
• Communicate findings, strategy, recommendations, and risk implications clearly to technical teams, executive leadership, legal counsel, boards, and internal or external stakeholders.
• Support and lead the development of proposals, statements of work, client presentations, market-facing materials, and strategic account plans.
• Work closely with sales, marketing, client relationship leaders, and other Kroll practices to identify and develop new business opportunities.
• Contribute to the growth of Kroll’s US Cyber Advisory practice through service development, thought leadership, capability building, team leadership, and mentoring.
• Help develop junior and mid-level team members through coaching, quality review, delivery oversight, and support for career progression.
• Build strong relationships across Kroll’s global Cyber Risk business to bring the best of the firm to clients and support cross-border opportunities where relevant.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed