Cybersecurity Due Diligence Consultant - Senior Associate

Charles River Associates; Toronto; On-site; CAD 110,000 - 170,000; Full time

Job summary

Charles River Associates is seeking a Senior Associate/Cybersecurity Consultant for the Forensic Services practice in Toronto, ON. The role focuses on evaluating cybersecurity risk in transactions and investments, delivering high-quality client reports, and guiding discussions with senior stakeholders.

You will translate conversations into engagement scopes, lead interviews, and contribute to repeatable assessment methodologies while working closely with CRA’s incident response team.

Qualifications

• Approximately 5–7 years of cybersecurity consulting, advisory, or due diligence experience.
• Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals.
• Ability to translate loosely defined client needs into structured deliverables and timelines.
• Strong commercial awareness and ability to tailor scopes to transaction, diligence, or investment objectives.

Responsibilities

• Lead and participate in client-facing assessments, including interviews, workshops, and executive readouts.
• Translate client discussions into clearly defined engagement scopes and SOWs.
• Produce client-ready reports with prioritized findings and risk-based recommendations.
• Support senior team members in proposal development and business development efforts.
• Develop reusable assessment content, templates, and client-facing deliverables for scalable services.

Skills

Executive communication

Structured questioning

Leadership

Proposal drafting

Time management

Tools

NIST CSF

ISO 27001

SOC 2 Type II

HIPAA

HITRUST

Job description

Charles River Associates is seeking a Senior Associate/Cybersecurity Consultant for the Forensic Services practice in Toronto, ON. The role focuses on evaluating cybersecurity risk in transactions and investments, delivering high-quality client reports, and guiding discussions with senior stakeholders.

You will translate conversations into engagement scopes, lead interviews, and contribute to repeatable assessment methodologies while working closely with CRA’s incident response team.