Cyber Risk Advisory Consultant, Remote

EG5 Special Risks Consultancy; Washington (District of Columbia); Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Private medical insurance

Headspace access

Gym discounts

Hybrid working

Flexible hours

Parental support

Job summary

S-RM in the United States is seeking a Cyber Risk Advisory Consultant to lead client engagements within our Cyber Security division. You will work with Engagement Managers, Associates, and Analysts, delivering strategic advisory, threat intelligence assessments, and security architecture guidance.

The role offers remote work options in the US, with a focus on developing cyber expertise, mentoring junior staff, and contributing to a range of challenging projects across sectors.

Qualifications

• Previous experience in an information security role.
• Prior consulting experience.
• Excellent writing skills and attention to detail.
• Experience presenting updates to both technical and non-technical stakeholders.
• Knowledge of security frameworks, standards, and control libraries (CIS, ISO, NIST).
• Understanding information security principles, tools, technologies, and risk management.
• Relevant certifications (SANS Security+, CISM, CISSP, ISO27001) are beneficial.
• Experience with cloud computing, offensive security practices, or systems administration is advantageous.

Responsibilities

• Consultancy delivery: play a senior delivery role on client engagements, including framework assessments, strategic advisory, training exercises, and threat intelligence assessments.
• Project management: oversee technical implementation plans, coordinating sub-contractors and collaboration with internal teams to deliver timely, successful results; may include acting as a vCISO.
• Develop domain knowledge and share it with the wider team through internal initiatives and programs.

Skills

Information security

Consulting experience

Technical writing

Stakeholder communication

Security frameworks (CIS ISO NIST)

Education

Academic cybersecurity or IT qualifications

Industry certifications (SANS Security+ CISM CISSP ISO27001)

Job description

Services

At S-RM we provide a range of services to help navigate risk, maximise opportunities and become more resilient.

Insights

Stay one step ahead with the latest insights from S-RM’s global team.

Explore Careers

Whether you’re a recent graduate or looking to take the next step in your career. Find out more about working at S-RM.

About S-RM

We are a global intelligence and cyber security consultancy. Discover more about who we are and how we work.

Cyber Risk Advisory Consultant, Remote

We have a new and exciting Cyber Risk Advisory Consultant role available within our Cyber Security division in the United States.

Who we are

S-RM is a global intelligence and cybersecurity consultancy. Since 2005, we’ve helped companies, governments and private individuals solve some of their most complex challenges.

We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, enthusiastic people who want to think critically, solve complex problems, and achieve success.

But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.

We’re excited you’re thinking about joining us.

The role

Our Cybersecurity Associates are the senior delivery roles in any engagement with our clients.

Our typical project teams comprise Engagement Managers, Associates, and Analysts. As an Associate, you will work closely with managers to develop unique solutions for our clients. You will also provide senior expertise and leadership in delivering those solutions and supporting the analysts working on your projects.

The role is a great opportunity for cyber professionals with 2+ years’ experience, looking to get exposure to a range of challenging projects, deepen their expertise, and build the next stage of their career.

Typical Activities And Projects Include:

• Consultancy delivery: play a senior delivery role on client engagements, including framework assessments, strategic advisory, training exercises, and threat intelligence assessments.


• Project management: oversee technical implementational plans, organising sub-contractors and collaboration with internal teams to deliver timely, successful results. This may include acting in a vCISO capacity where required.


• Development and domain knowledge: with our support, develop your own cyber expertise and share it with the wider team through internal initiatives and programs.

Other Features Of The Role Include:

• Variety of engagements: no day will be the same. Our team works on a range of cyber advisory mandates across many sectors.


• Range of opportunities: you will have opportunities to broaden your security awareness through working with our incident response and ethical hacking practices.


• Flexible working practices: we are mindful of our team’s work/life balance and offer flexible working options to support your wellbeing.

What we are looking for

Candidates with the following skills and experience are likely to succeed within Cyber Advisory at S-RM.

That said, if you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box—we’re looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.

We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.

We’re Looking For Someone With Some Or All Of These Skills Who Can Adapt To Change And Work Comfortably In a Fast-paced Environment:

• Previous experience in an information security role;


• Prior consulting experience;


• Excellent writing skills and attention to detail;


• Experience and confidence in presenting verbal updates to both technical and non-technical stakeholders;


• Demonstrable knowledge of:


• Various security frameworks, standards, and control libraries such as CIS, ISO, and NIST;


• Information security principles, tools, technologies and techniques;


• Security risk management methodologies;


• Applicable skills and qualifications are beneficial, including:


• Academic cybersecurity or IT qualifications;


• Industry accreditation such as SANS Institute, Security+, CISM, CISSP or ISO27001;


• Technical capabilities in some or all of the following areas is beneficial but not essential:


• Cloud computing;


• Offensive security practices and techniques;


• System administration experience.

All candidates must have permission to work in the US by the start of their employment.

Our benefits

• 20 days holiday per year in addition to 12 public holidays (+1 day for every day of service up to a maximum of 25 days);


• Life insurance – 4x annual salary;


• Matching pension contribution up to 6% (up to a maximum of 12% combined), and financial education;


• Military Leave– to a maximum of 5 years;


• Hybrid working and flexible working hours.


• Parental Support:


• Fertility treatment leave – 5 days of leave per cycle of treatment per year;


• Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;


• Paternity leave – 6 weeks of full pay.


• Various Health and Medical Benefits including:


• 100% Company paid private medical, dental and vision insurance for employee, partner and children;


• Gym discounts for you and your partner;


• EAP programme for you and your immediate family;


• Free access to the world-famous mindfulness app Headspace.

The full salary range for this role is $110,000 - $150,000 however this will be dependent on individual experience and location. This will be discussed further during initial calls.

The application process

We want to get to know you, and for you to get to know us, to see if we’d be a good fit. We are responsive and respectful of people’s time throughout our hiring process.

A Typical Application Process Includes:

• Initial screening of your application by our recruiting team.


• An interview to assess your baseline technical skills.


• An interview to discuss your previous experience, broader competencies, and suitability for the role.