Cyber Risk Advisory (CRA) Consultant – Security & Privacy

About the role

The Cyber Risk Advisory (CRA) Consultant joins a team that evaluates security, privacy and risk for a variety of clients. You will advise on cybersecurity programs, industry standards and help design remediation roadmaps.

Key responsibilities

• Lead information‑risk and security discussions with technical and non‑technical stakeholders.
• Perform risk, security and compliance assessments, including control testing.
• Produce tactical reports with findings, maturity scores and remediation recommendations.
• Prepare executive‑level briefings on threats, organizational risks and recommended actions.
• Assist in developing and operationalising enterprise information‑security programs.
• Assess policies, procedures and legislation against frameworks such as NIST CSF, NIST 800‑53, CIS Controls, GDPR and CCPA.

Required profile

• 3+ years of experience in cybersecurity, GRC or privacy.
• Consulting experience or security work in sectors such as finance, healthcare, energy or technology.
• Bachelor’s degree in Business Administration, Computer Science, Information Systems, Engineering or related field, or equivalent experience.
• Strong analytical, problem‑solving and communication skills.
• Ability to work independently and manage time effectively.

Required skills

• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑53
• CIS Controls
• ISO information‑security standards
• AWS cloud services
• Microsoft Azure cloud services
• Google Cloud Platform

What we offer

• Opportunity to work on high‑impact digital transformation projects across multiple industries.
• Exposure to cutting‑edge security frameworks and emerging technologies.
• Professional development and support for industry certifications.