Senior Associate, Cyber Security Disputes & Investigations

Alvarez & Marsal; Mumbai; On-site; INR 2,000,000 - 3,500,000; Full time

Job summary

Alvarez & Marsal is seeking a Senior Associate in its Cyber Security Disputes & Investigations practice in Mumbai. You will deliver cybersecurity, privacy, risk, and AI governance engagements across industries, assessing posture, identifying risks, and developing remediation roadmaps.

The role involves independent delivery, stakeholder interviews, control assessments, and producing high-quality client reports.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, or CS.
• 4–6 years of cybersecurity consulting, risk advisory, or information security experience.
• Experience delivering governance reviews, privacy initiatives, or compliance programs.
• Fluent English with strong written and verbal communication.

Responsibilities

• Independently execute cybersecurity, privacy, and governance engagements with minimal supervision.
• Conduct stakeholder interviews, workshops, control assessments, and documentation reviews.
• Analyze findings, prioritize risks, and develop actionable recommendations.
• Prepare client reports, presentations, and executive briefings.
• Manage workstreams and ensure timelines.
• Mentor Analysts and Associates and foster collaboration.
• Support proposals, scoping, and business development.
• Stay current on cybersecurity, privacy regulations, and AI governance.

Skills

Cybersecurity consulting

Risk advisory

Information security

Governance & compliance

Education

Bachelor's degree in Cybersecurity/Information Security/IT/CS

Tools

ISO 27001

NIST CSF

CIS Controls

COBIT

Job description

Description

Alvarez & Marsal, a leading independent global professional services firm, specializing in providing turnaround management, performance improvement, and corporate advisory services, is seeking to expand its Disputes & Investigations team. With more than 7,000 professionals based in 75+ locations across 30+ countries in North America, Europe, Asia, and Latin America, our firm excels in problem-solving and value creation. Drawing on a strong operational heritage and hands-on approach, our professionals work closely with organizations and stakeholders to help tackle complex business issues and maximize value.

Job Description: Senior Associate, Cyber Security Disputes & Investigations

Overview

Alvarez & Marsal, a leading independent global professional services firm, specializing in providing turnaround management, performance improvement, and corporate advisory services, is seeking to expand its Disputes & Investigations team. With more than 7,000 professionals based in 75+ locations across 30+ countries in North America, Europe, Asia, and Latin America, our firm excels in problem-solving and value creation. Drawing on a strong operational heritage and hands-on approach, our professionals work closely with organizations and stakeholders to help tackle complex business issues and maximize value.

The Position

As a Senior Associate within A&M's Cybersecurity practice in the Disputes & Investigations group, you will play a key role in delivering cybersecurity, privacy, risk, and AI governance engagements across diverse industries. You will work directly with clients to assess cybersecurity posture, identify risks, develop remediation roadmaps, and support implementation of security and governance frameworks.

The successful candidate will contribute to and independently execute engagements involving:

Cybersecurity Program Maturity Assessments

• Evaluate cybersecurity programs against industry frameworks including ISO 27001, NIST CSF, CIS Controls, COBIT, and other regulatory requirements.


• Assess governance structures, security operating models, policies, standards, and controls.


• Develop maturity assessments, gap analyses, and improvement roadmaps.

IT Risk & Security Assessments

• Lead cybersecurity risk assessments across applications, infrastructure, cloud environments, and third-party ecosystems.


• Perform security reviews, data classification exercises, and control effectiveness assessments.


• Identify cybersecurity risks and provide practical mitigation recommendations.

Data Privacy & Regulatory Compliance

• Conduct privacy assessments against DPDPA, GDPR, ISO 27701, and other applicable regulations.


• Support development and implementation of privacy governance frameworks, policies, and operating procedures.


• Assist clients in privacy program enhancement, data lifecycle reviews, and compliance readiness initiatives.

AI Security & Governance

• Assess AI systems for security, privacy, governance, and compliance risks.


• Support implementation of AI governance frameworks, risk management practices, and responsible AI controls.


• Evaluate controls related to GenAI solutions, model governance, data protection, and regulatory requirements.

Security Awareness & Cyber Culture

• Design and deliver cybersecurity and privacy awareness initiatives.


• Develop training content, phishing simulation programs, and executive awareness sessions.


• Support clients in building sustainable cyber risk awareness programs.

Cybersecurity Architecture & Technical Reviews

• Participate in security assessments across cloud, infrastructure, application security, identity and access management, and data security domains.


• Review technical controls and architectures against security best practices and industry standards.


• Identify gaps and recommend improvements aligned to organizational risk appetite.

Research & Thought Leadership

• Monitor emerging cybersecurity threats, industry trends, AI security developments, and evolving regulatory requirements.


• Contribute to thought leadership, methodologies, accelerators, and market-facing content.

Role and Responsibilities

Client Delivery

• Independently execute cybersecurity, privacy, and governance engagements with minimal supervision.


• Conduct stakeholder interviews, workshops, control assessments, and documentation reviews.


• Analyze findings, prioritize risks, and develop actionable recommendations.


• Prepare high-quality client reports, presentations, and executive briefings.

Project Management

• Manage workstreams and deliverables while ensuring quality and adherence to timelines.


• Coordinate with client stakeholders and internal teams to drive project execution.


• Support proposal development, scoping activities, and business development efforts.

Team Leadership & Collaboration

• Mentor Analysts and Associates through technical guidance and quality reviews.


• Foster collaboration across multidisciplinary teams.


• Contribute to capability building, knowledge sharing, and practice development initiatives.

Business Development Support

• Contribute to proposal preparation, market research, and solution development.


• Participate in client meetings, workshops, and networking activities.

Continuous Learning

• Stay current on cybersecurity, AI governance, privacy regulations, and industry best practices.


• Pursue relevant professional certifications and technical skill development.

The Requirements

Education & Experience

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.


• Minimum 4-6 years of relevant cybersecurity consulting, risk advisory, or information security experience.


• Experience delivering cybersecurity assessments, governance reviews, privacy initiatives, or compliance programs.

Technical Competencies

Cybersecurity Governance & Risk

• Strong understanding of cybersecurity frameworks and standards including: ISO 27001, NIST CSF, CIS Controls, ISO 22301, ISO 27701

AI Security & Governance

• Understanding of AI governance frameworks, AI risk management principles, and responsible AI practices.


• Awareness of emerging AI security risks including model security, prompt injection, adversarial attacks, and data privacy concerns.

Data Privacy & Compliance

• Experience working with DPDPA, GDPR, ISO 27701, or similar privacy regulations and standards.


• Knowledge of privacy impact assessments and data protection controls.

Preferred Certifications

One or more of the following certifications are preferred: CISSP, CISA, CISM, Certified Data Privacy Professional (CIPP)

Soft Skills

• Strong analytical and problem-solving capabilities.


• Excellent report writing and presentation skills.


• Ability to communicate effectively with technical and executive stakeholders.


• Strong stakeholder management and client-facing skills.


• Ability to manage multiple priorities in a fast-paced consulting environment.


• Demonstrated ownership, accountability, and attention to detail.

Language

• Fluent written and verbal communication in English.