Cyber Risk Quantification Delivery Manager

KPMG United Kingdom; London; On-site; GBP 65,000 - 95,000; Full time

Job summary

A leading consultancy seeks a CRQ Delivery Manager to join its award-winning Cyber Risk Insights team. In this high-impact role, you'll deliver tailored insights to clients, shape the future of CRQ services, and coach the next generation of practitioners. If you have a passion for cyber risk and a proactive mindset, we want to hear from you!

Qualifications

• Experience delivering advisory or cyber risk services in complex client environments.
• Familiarity with CRQ frameworks (e.g., FAIR).
• Comfortable discussing key CRQ literature.

Responsibilities

• Manage CRQ engagements end-to-end from scoping to delivery.
• Coach and mentor junior team members.
• Contribute to service and capability development.

Skills

Effective communication skills

Proactive mindset

Broad technical understanding

Team management

Education

Relevant certifications (CISSP, CISM)

Formal training in quantitative risk methods

Job description

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Job description

Summary of Role Purpose :

Join the only Big Four firm with its own Cyber Risk Quantification (CRQ) SaaS platform - Cyber Risk Insights (CRI).

CRI is recognized by Forrester as a global leader in Cyber Risk Quantification (CRQ) and has been shortlisted for multiple awards, including Security Innovation of the Year, Best Risk Management Product, and Best Security Product of the Year.

As part of a fast-growing, entrepreneurial team within a global consultancy, you'll help some of the world's largest organizations make better cyber risk decisions using our award-winning tool.

This is a rare opportunity to join a high-performing team that operates like a scale-up - combining market-leading technology, a proven method, and longstanding client trust. You'll play a central role in delivering high-quality CRQ engagements, mentoring rising talent, and contributing to one of the most exciting growth areas in our Technology & Data practice.

Description of the role :

Client Delivery

• Manage CRQ engagements end-to-end - from scoping through to clear, decision-ready outputs.

• Build trusted relationships with client stakeholders, across sectors and maturity levels.

• Use CRI to deliver scenario-driven analysis that translates cyber risk into a language business stakeholders understand.

• Tailor CRQ approaches to meet diverse organizational needs.

Team Management

• Coach and mentor junior team members, helping them build confidence in both the science and the art of CRQ.

• Identify skill gaps and support continuous learning to keep the team ahead of the curve.

• Contribute to a collaborative, inclusive culture that encourages innovation and growth.

Service & Capability Development

• Continuously improve our CRQ delivery methods, toolkits, and playbooks.

• Feed ideas into product development - helping shape new features and use cases.

• Contribute to embedding CRQ into broader risk domains like operational resilience, risk appetite, and third-party risk.

Practice Growth

• Support proposals, demos, and early-stage discussions with prospective clients.

• Build visibility and credibility for the team through thought leadership, blogs, and events.

• Help us grow - not just in numbers, but in industry presence and impact.

The Person:

We're open to strong candidates from adjacent disciplines who are excited to specialize in CRQ. You may already have some direct experience, or you may be pivoting from a related cyber security field. Either way, we expect a clear interest and commitment to building deep expertise in CRQ.

We're looking for :

• Proven experience delivering advisory or cyber risk services in complex client environments.

• Familiarity with CRQ frameworks (e.g., FAIR) and their pros and cons, approaches to measuring risk, and common use cases.

• A proactive mindset - by interview, you should be comfortable discussing key CRQ literature (e.g., How to Measure Anything in Cybersecurity Risk), the competitive landscape, and how CRQ fits into the broader risk ecosystem.

• Broad technical understanding across cyber domains - and how controls influence loss exposure.

• Effective communication skills and a clear ability to simplify complexity for business stakeholders.

• Experience managing people and developing talent in a fast-paced, client-facing setting.

• Comfortable managing delivery in a consultancy / professional services environment, balancing quality, scope, time, and budget.

Preferred but not essential:

• Hands-on experience delivering CRQ services or using structured risk quantification methods (e.g., Monte Carlo simulation, FAIR, Bayesian models).

• Familiarity with CRQ tools and platforms (ours or others in the market).

• Experience embedding CRQ into wider programmes - e.g., risk appetite, operational resilience, cyber investment planning.

• Relevant certifications (e.g., CISSP, CISM, risk qualifications) or formal training in quantitative risk methods.

The Job Description:

As a CRQ Delivery Manager, you will:

• Lead the delivery of client engagements that help organizations quantify and manage their cyber risk exposure.

• Use our CRQ SaaS platform to deliver tailored, scenario-driven insights that support real decisions.

• Build and nurture client relationships across a range of sectors and maturity levels.

• Coach and develop a growing team of CRQ practitioners.

• Contribute to the ongoing evolution of our service offering, product features, and internal ways of working - helping us stay ahead in a fast-changing field.