Cybersecurity Due Diligence Advisor (Senior Associate)

Charles River Associates; United States; Hybrid; USD 130,000 - 153,000; Full time

Job summary

Charles River Associates (CRA) is seeking a Senior Associate/Cybersecurity Consultant to lead cybersecurity due diligence and advisory engagements for private equity, legal, and executive audiences. You will conduct client interviews, workshops, and readouts, translating discussions into SOWs and delivering risk-driven recommendations.

The role emphasizes independence, strong communication with CIOs and executives, and the ability to map controls across governance, identity, endpoint, and

Qualifications

• 5–7 years of cybersecurity consulting or due diligence experience.
• Experience with cyber resilience assessments and tabletop exercises is a plus.
• Ability to translate client needs into structured deliverables and timelines.
• Excellent executive communication for CIOs, legal, and PE stakeholders.
• Experience drafting SOWs, engagement letters, and proposals.
• Strong written communication and client-ready reporting skills.
• Knowledge of NIST CSF and related frameworks (ISO 27001, SOC 2).

Responsibilities

• Lead and participate in client-facing assessments and executive readouts.
• Translate discussions into engagement scopes and SOWs aligned to frameworks.
• Produce client-ready risk reports with prioritized findings and recommendations.
• Support business development and repeatable assessment methodologies.

Skills

Client presence & communication

Scoping & advisory

Report writing

Cybersecurity frameworks

Technical & domain knowledge

Tools

CrowdStrike

Tanium

Microsoft 365

Azure Entra ID

AWS

Tenable

Qualys

Job description

Charles River Associates (CRA) is seeking a Senior Associate/Cybersecurity Consultant to lead cybersecurity due diligence and advisory engagements for private equity, legal, and executive audiences. You will conduct client interviews, workshops, and readouts, translating discussions into SOWs and delivering risk-driven recommendations.

The role emphasizes independence, strong communication with CIOs and executives, and the ability to map controls across governance, identity, endpoint, and