Director, Cyber Risk Advisory Services

Description

The Opportunity:

In this role, you will lead a team of consultants in delivering complex cyber strategy engagement that need understanding about business context, regulatory environment, threats and vulnerabilities and provide expert guidance on cybersecurity risk, maturity assessments, developing tailored risk management strategies, conducting quantitative risk analysis, and identifying new business opportunities.

Responsibilities:

Leadership & Practice Development:

• Lead a team of Cyber Risk Advisory consultants, fostering a culture of collaboration, professional growth, and delivery excellence.
• Generate accelerators like CRQ models, Maturity models, automated worksheets, AI controls etc. for faster time and value to deliver

Client Delivery & Engagement:

• Oversee the delivery of high-quality cybersecurity consulting services, including:
  • Cybersecurity maturity assessments using industry-standard frameworks (NIST CSF, ISO 27001, CIS Controls).
  • Development of pragmatic cybersecurity strategies, roadmaps, and implementation plans.
  • Conducting quantitative risk assessments and communicating findings to stakeholders.
  • Providing guidance on security governance, policies, and procedures.
• Build and maintain strong client relationships, acting as a trusted advisor on cybersecurity risk matters.

Business Development & Sales:

• Lead business development initiatives to identify and pursue new client opportunities.
• Develop and present compelling proposals that clearly articulate the value proposition of our services.
• Build and leverage relationships with key stakeholders in the cybersecurity industry.
• Manage sales pipeline and track progress toward revenue goals.

Qualifications:

• Bachelor's degree in computer science, information security, or a related field.
• 10+ years of progressive experience in cybersecurity consulting, with a minimum of 3 years in a leadership role.
• Proven track record of successfully building and growing a consulting practice.
• Deep understanding of cybersecurity frameworks, standards, and best practices (NIST, ISO, CIS, etc.).
• Expertise in conducting cybersecurity maturity assessments, developing risk management strategies, and performing quantitative risk analysis.
• Strong business acumen, including experience with P&L management, budgeting, and forecasting.
• Excellent communication, presentation, and interpersonal skills, with the ability to effectively communicate complex technical concepts to both technical and executive audiences.
• Two Industry certifications are mandatory – CISSP, CISA, Any SANS certification, ISO 27001 LI/A

Diversity & Inclusion

A&M’s entrepreneurial culture celebrates independent thinkers and doers who can positively impact our clients and shape our industry. The collaborative environment and engaging work—guided by A&M’s core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are the main reasons our people love working at A&M. Inclusive Diversity means we embrace diversity, and we foster inclusiveness, encouraging everyone to bring their whole self to work each day. It runs through how we recruit, develop employees, conduct business, support clients, and partner with vendors. It is the A&M way.

Equal Opportunity Employer

It is Alvarez & Marsal’s practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here.

Unsolicited Resumes from Third-Party Recruiters

Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening and in alignment with our Inclusive Diversity values. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.