Cyber Strategy & Risk Management Lead

Grant Thornton (US); New York (NY); Hybrid; USD 162,000 - 202,000; Full time

Job summary

Grant Thornton is seeking a Cyber Strategy & Management Manager to apply cybersecurity capabilities across governance, risk, strategy, and incident response for our Cyber & Privacy Practice. You will lead client engagements, assess architectures, and deliver strategic guidance to mature programs.

The role requires 5+ years in cybersecurity consulting, relevant certifications, and the ability to travel. You will collaborate with clients and teams to ensure high standards and confidentiality.

Qualifications

• Bachelor’s degree in cybersecurity or related field required.
• Minimum 5 years of related cybersecurity experience in a consulting practice or similar function.
• CISSP, CISM, GIAC or equivalent certifications required.
• Experience reviewing security architectures across on‑premises and cloud environments.
• Ability to manage multiple engagements and cooperate with clients and teams.

Responsibilities

• Lead cybersecurity assessments, risk reviews, and architecture evaluations for client engagements.
• Develop strategic recommendations to mature clients' cybersecurity programs, processes and capabilities.
• Manage engagements from planning through fieldwork and reporting.
• Communicate findings to clients and internal stakeholders, and stay current on cybersecurity trends.
• Build and maintain strong client relationships and uphold confidentiality.
• Travel as needed to support client work.

Skills

CISSP

CISM

GIAC

Cloud security

Cybersecurity assessments

Risk management

Project management

Client communication

Travel readiness

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

AWS

Azure

Google Cloud

NIST CSF

ISO 27001/2

PCI-DSS

Job description

Grant Thornton is seeking a Cyber Strategy & Management Manager to apply cybersecurity capabilities across governance, risk, strategy, and incident response for our Cyber & Privacy Practice. You will lead client engagements, assess architectures, and deliver strategic guidance to mature programs.

The role requires 5+ years in cybersecurity consulting, relevant certifications, and the ability to travel. You will collaborate with clients and teams to ensure high standards and confidentiality.