Associate Principal/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates; Toronto; Hybrid; CAD 100,000 - 130,000; Full time

Benefits offered by this job

Superior benefits package

100 hours of training annually

Wellness programs

Job summary

A consulting firm specializing in forensic services seeks an Associate Principal in Cybersecurity & Incident Response. The role involves leading security investigations, performing digital forensics, and serving as the main client contact. Ideal candidates will have 7-10 years of experience in cyber intrusion investigations and excellent leadership skills. The position offers a comprehensive benefits package and encourages a hybrid work environment.

Qualifications

• 7-10+ years’ experience in cyber intrusion investigation, digital forensics or incident response.
• Hands-on experience as a testifying expert or incident responder.
• Ability to lead teams and manage multiple projects.

Responsibilities

• Lead security and privacy investigations for clients.
• Perform forensic analysis of digital information.
• Serve as primary point of contact for clients.

Skills

Team leadership

Incident response

Digital forensics

Cybercrime investigation

Data Analytics

Education

Bachelor's or Master's degree in a related field

Tools

Networking knowledge (TCP/IP, protocols)

Job description

Associate Principal/Cybersecurity & Incident Response (Forensic Services practice)

Join to apply for the Associate Principal/Cybersecurity & Incident Response (Forensic Services practice) role at Charles River Associates.

Position Overview

CRA’s Forensic Services practice supports companies’ commitment to integrity by assisting them and their counsel in independently responding to allegations of fraud, waste, abuse, misconduct, and non-compliance. We deploy cross-trained teams of forensic professionals to provide deeper insights and value quickly. We provide accounting and forensic services as well as cybercrime investigation services.

Responsibilities

• Leading security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters, including ongoing breach detection, threat analysis, incident response and malware analysis.
• Performing forensic analysis of digital information using standard computer forensics and evidence handling techniques and tools.
• Serving as primary point of contact for clients regarding incident response activities including malicious code, unauthorized access, and inappropriate usage.
• Supervising project team execution by leading quality assurance efforts and overseeing work product.
• Improving the incident response team’s ability to react to incidents by evaluating and implementing new tools and processes.
• Maintaining effective relationships with local, state and federal law enforcement agencies to assist in criminal matters.
• Creating, leading, and maintaining a leveraged team environment positioned for continued success and expansion by recruiting and retaining employees and managing team morale.
• Participating in and leading business development efforts by building relationships with current and potential clients, drafting and presenting proposals, participating in pitches, and demonstrating firm capabilities.
• Providing technical assessment/audit and guidance to clients on the adequacy of cyber security controls in accordance with frameworks such as NIST CSF 2.0, HIPAA, ISO 27001/27002, SOC2, NERC-CIP.
• Assisting with team recruiting and training efforts as needed.
• Working at the direction of counsel on investigations.

Desired Qualifications

• A Bachelor’s or Master’s degree in a related field is preferred but can be waived with sufficient experience.
• 7-10+ years’ experience in cyber intrusion investigation, digital forensics or incident response analysis.
• Ability to effectively lead teams, prioritize multiple projects and meet deadlines.
• Hands-on technical experience as a testifying expert, incident responder, network forensic analyst or malware analyst.
• Experience leading data analytics engagements and managing technology-based best practices.
• Working knowledge of computer hardware components, operating systems, file systems, networks, email systems, mobile devices, IT security or incident response.
• Deep knowledge of networking (TCP/IP, design, traffic flow, protocols, sessions), operating systems (Windows/*nix) and web technologies.
• Willing and able to travel for client projects.

To Apply

To be considered for a position in Canada, we require the following:

• Resume – please include current address, personal email and telephone number.

If you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs.

Career Growth And Benefits

• CRA offers robust skills development programs, including 100 hours of training annually through formal and informal programs, plus leadership and collaboration opportunities through internal firm development activities.
• Comprehensive total rewards program including a superior benefits package, wellness programs, and in-house immigration support for foreign nationals and international travelers.

Work Location Flexibility

CRA supports office-based collaboration while enabling remote work when appropriate. Typically, 3 to 4 days a week in the office, with travel to other CRA offices or client sites as needed. Some additional remote work options may be available during certain periods.

Our Commitment to Diversity

Charles River Associates is an equal opportunity employer (EOE/AAE). We strive for a fair and consistent hiring process, celebrate diversity, and are committed to an inclusive work environment.