Cyber Risk Consultants

eTeam; Richmond (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading cybersecurity consultancy is seeking an experienced Cyber Risk Consultant to assist enterprise clients in managing cybersecurity risks. The role involves conducting risk assessments, developing risk management frameworks, and providing regulatory compliance guidance. Ideal candidates have a strong background in cybersecurity, excellent communication skills, and at least 5 years of experience in risk management. This position is based in Richmond, Virginia.

Qualifications

• Minimum 5 years of experience in cybersecurity risk management or compliance consulting roles.
• Strong understanding of cyber risk methodologies and enterprise risk frameworks.
• Ability to communicate complex risk issues to technical and non-technical audiences.

Responsibilities

• Conduct enterprise-level cyber risk assessments and maturity evaluations.
• Identify and analyze security risks to critical assets, systems, and data.
• Develop and implement cyber risk management frameworks aligned with industry standards.

Skills

Analytical thinking

Cyber risk methodologies

Communication skills

Collaboration skills

Critical thinking

Education

Bachelor's degree in Cybersecurity, Information Systems, Risk Management, or related field

Tools

GRC tools (e.g., Archer, OneTrust)

Job description

Overview

We are seeking an experienced and analytical Cyber Risk Consultant to help enterprise clients assess, manage, and mitigate cybersecurity risks. This role focuses on developing and implementing enterprise-wide risk management frameworks, ensuring compliance with regulatory standards, and improving overall security posture.

Responsibilities

• Conduct enterprise-level cyber risk assessments and maturity evaluations.
• Identify and analyze security risks to critical assets, systems, and data across IT and OT environments.
• Develop and implement cyber risk management frameworks aligned with industry standards (, NIST CSF, ISO , CIS Controls).
• Provide guidance on regulatory compliance (, GDPR, HIPAA, SOX, PCI-DSS, CCPA) and industry-specific requirements.
• Create and maintain risk registers, control matrices, and risk treatment plans.
• Facilitate risk workshops and collaborate with stakeholders across security, IT, legal, and compliance teams.
• Deliver executive-level reports and recommendations on risk mitigation strategies and security program enhancements.
• Support internal and external audit processes, control testing, and third-party risk assessments.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, or related field.
• years of experience in cybersecurity risk management or compliance consulting roles.
• Strong understanding of cyber risk methodologies, threat modeling, and enterprise risk frameworks.
• Experience with GRC tools (, Archer, OneTrust, ServiceNow GRC, MetricStream).
• Working knowledge of regulatory and standards frameworks : NIST, ISO, CIS, COBIT, GDPR, HIPAA, SOX, etc.
• Ability to communicate complex risk issues to technical and non-technical audiences, including C-suite stakeholders.

Preferred Qualifications

• Professional certifications such as CRISC, CISA, CISSP, CISM, or ISO Lead Implementer / Auditor.
• Experience in large enterprise or consulting environments.
• Familiarity with cloud risk management (AWS, Azure, GCP).

Soft Skills

• Strong analytical and critical thinking abilities.
• Excellent written and verbal communication.
• Ability to work independently and collaboratively in cross-functional teams.
• High level of integrity and professional ethics.