Cyber Risk Advisory Consultant

S-RM; United States; Hybride; USD 110 000 - 150 000; Plein temps

Avantages offerts par ce poste

Life insurance – 4x annual salary

Matching pension contribution up to 6%

Hybrid working

Flexible working hours

Parental support

Health and medical benefits

Headspace mindfulness app access

Vacation entitlement (20 days + public

Résumé du poste

S-RM in the United States is seeking a Cyber Advisory Associate with 2+ years of experience to join engagements led by managers and analysts. You will deliver senior-level expertise and guide the team on client projects.

You will work across consultancy delivery, project management, and development of cyber domain knowledge, with opportunities to progress to a vCISO capacity as needed. The role offers hybrid working and exposure to diverse sectors.

Qualifications

• Previous information security experience and consulting background.
• Excellent writing skills and attention to detail.
• Ability to present updates to technical and non-technical stakeholders.
• Knowledge of CIS, ISO, and NIST security frameworks and controls.
• Familiarity with information security principles, tools and methodologies.
• Understanding of security risk management concepts and practices.
• Academia qualifications in cybersecurity or IT are beneficial.
• Professional accreditations such as SANS, Security+, CISM, CISSP or ISO27001 are advantageous.
• Experience with cloud computing and offensive security practices is a plus.

Responsabilités

• Consultancy delivery: play a senior delivery role on client engagements, including framework assessments, strategic advisory, training exercises, and threat intelligence assessments.
• Project management: oversee technical implementational plans, coordinate sub-contractors and collaborate with internal teams to deliver timely, successful results.
• Development and domain knowledge: expand cyber expertise and share with the team through internal programs.

Connaissances

Information security

Consulting experience

Writing skills

Verbal updates to stakeholders

Security frameworks

Security principles/tools/tech

Risk management methodologies

Academic cybersecurity qualifications

Industry accreditations

Cloud computing

Offensive security practices

Formation

Academic cybersecurity qualifications

Description du poste

WHO ARE WE:

S-RM is a global intelligence and cybersecurity consultancy. Since 2005, we’ve helped companies, governments and private individuals solve some of their most complex challenges.

We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, enthusiastic people who want to think critically, solve complex problems, and achieve success.

But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.

We’re excited you’re thinking about joining us.

THE ROLE:

Our Cybersecurity Associates are the senior delivery roles in any engagement with our clients.

Our typical project teams comprise Engagement Managers, Associates, and Analysts. As an Associate, you will work closely with managers to develop unique solutions for our clients. You will also provide senior expertise and leadership in delivering those solutions and supporting the analysts working on your projects.

The role is a great opportunity for cyber professionals with 2+ years’ experience, looking to get exposure to a range of challenging projects, deepen their expertise, and build the next stage of their career.

Typical activities and projects include:

• Consultancy delivery: play a senior delivery role on client en gagements, including framework assessments, strategic advisory, training exercises, and threat intelligence assessments .
• Project management: oversee technical implementational plans, organising sub-contractors and collaboration with internal teams to deliver timely , successful results . This may include acting in a vCISO capacity where required .
• D evelopment and domain knowledge: with our support, develop your own cyber expertise and share it with the wider team through internal initiatives and programs.

Other features of the role include:

• Variety of engagements : no day will be the same . Our team works on a range of cyber advisory mandates across many sectors.
• Range of opportunities: you will have opportunities to broaden your security awareness through working with our incident response and ethical hacking practices.
• Flexible working practices: w e are mindful of our team’s work/life balance and offer flexible working options to support your wellbeing.

WHAT WE’RE LOOKING FOR:

Candidates with the following skills and experience are likely to succeed within Cyber Advisory at S-RM.

That said, if you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box—we’re looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.

We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.

We’re looking for someone with some or all of these skills who can adapt to change and work comfortably in a fast-paced environment:

• Previous experience in an information security role;
• Prior consulting experience;
• Excellent writing skills and attention to detail;
• Experience and confidence in presenting verbal updates to both technical and non-technical stakeholders;
• Demonstrable knowledge of:
• Various security frameworks, standards, and control libraries such as CIS, ISO, and NIST;
• Information security principles, tools, technologies and techniques;
• Security risk management methodologies;
• Applicable skills and qualifications are beneficial, including:
• Academic cybersecurity or IT qualifications;
• Industry accreditation such as SANS Institute, Security+, CISM, CISSP or ISO27001;
• Technical capabilities in some or all of the following areas is beneficial but not essential:
• Cloud computing;
• Offensive security practices and techniques;

All candidates must have permission to work in the US by the start of their employment.

• 20 days holiday per year in addition to 12 public holidays (+1 day for every day of service up to a maximum of 25 days);
• Life insurance – 4x annual salary;
• Matching pension contribution up to 6% (up to a maximum of 12% combined), and financial education;
• Military Leave– to a maximum of 5 years;
• Hybrid working and flexible working hours.
• Parental Support:
• Fertility treatment leave – 5 days of leave per cycle of treatment per year;
• Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;
• Paternity leave – 6 weeks of full pay.
• Various Health and Medical Benefits including:
• 100% Company paid private medical, dental and vision insurance for employee, partner and children;
• Gym discounts for you and your partner;
• EAP programme for you and your immediate family;
• Free access to the world-famous mindfulness app Headspace.

The full salary range for this role is $110,000 - $150,000 however this will be dependent on individual experience and location. This will be discussed further during initial calls.

THE APPLICATION PROCESS

We want to get to know you, and for you to get to know us, to see if we’d be a good fit. We are responsive and respectful of people’s time throughout our hiring process.

A typical application process includes:

• Initial screening of your application by our recruiting team.
• An interview to assess your baseline technical skills.
• An interview to discuss your previous experience, broader competencies, and suitability for the role.