Job Details

We are seeking an experienced and analytical Cyber Risk Consultant to help enterprise clients assess, manage, and mitigate cybersecurity risks. This role focuses on developing and implementing enterprise-wide risk management frameworks, ensuring compliance with regulatory standards, and improving overall security posture.

Key Responsibilities :

• Conduct enterprise-level cyber risk assessments and maturity evaluations.
• Identify and analyze security risks to critical assets, systems, and data across IT and OT environments.
• Develop and implement cyber risk management frameworks aligned with industry standards (, NIST CSF, ISO , CIS Controls).
• Provide guidance on regulatory compliance (, GDPR, HIPAA, SOX, PCI-DSS, CCPA) and industry-specific requirements.
• Create and maintain risk registers, control matrices, and risk treatment plans.
• Facilitate risk workshops and collaborate with stakeholders across security, IT, legal, and compliance teams.
• Deliver executive-level reports and recommendations on risk mitigation strategies and security program enhancements.
• Support internal and external audit processes, control testing, and third-party risk assessments.

Required Qualifications :

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, or related field.
• years of experience in cybersecurity risk management or compliance consulting roles.
• Strong understanding of cyber risk methodologies, threat modeling, and enterprise risk frameworks.
• Experience with GRC tools (, Archer, OneTrust, ServiceNow GRC, MetricStream).
• Working knowledge of regulatory and standards frameworks : NIST, ISO, CIS, COBIT, GDPR, HIPAA, SOX, etc.
• Ability to communicate complex risk issues to technical and non-technical audiences, including C-suite stakeholders.

Preferred Qualifications :

• Professional certifications such as CRISC, CISA, CISSP, CISM, or ISO Lead Implementer / Auditor.
• Experience in large enterprise or consulting environments.
• Familiarity with cloud risk management (AWS, Azure, GCP).

Soft Skills :

• Strong analytical and critical thinking abilities.
• Ability to work independently and collaboratively in cross-functional teams.
• High level of integrity and professional ethics.