Managing Director, Cyber Risk

Kroll; Chicago (IL); On-site; USD 250,000 - 350,000; Full time

Job summary

Kroll is seeking a Managing Director to lead and expand its Cybersecurity Advisory practice serving the Private Equity sector in the United States. The role focuses on growth, client leadership, and delivering strategic cybersecurity advisory to enhance investment outcomes and enterprise value.

The ideal candidate will bring deep cybersecurity strategy expertise, a strong PE network, and a proven track record of leading high-performing consulting teams while driving significant revenue.

Qualifications

• Bachelor's degree or equivalent in a security-related field.
• 15+ years of progressive cybersecurity consulting/risk management experience.
• 7+ years serving private equity firms or PE-backed portfolio companies.
• Established network within PE/growth-focused investment ecosystems.
• Experience at a leading consulting or PE advisory organization.
• Proven track record of generating and managing significant consulting revenue.
• Deep understanding of cybersecurity strategy, governance, cloud security, resilience, and regulatory compliance.

Responsibilities

• Lead the Cybersecurity Advisory practice for the Private Equity sector and drive growth.
• Develop trusted relationships with PE sponsors and portfolio company executives.
• Oversee cybersecurity diligence for transactions and value-creation initiatives.
• Guide governance, risk management, incident response, and regulatory compliance programs.
• Build and mentor a high-performing team of cybersecurity consultants and engagement leaders.
• Represent the firm at industry events and publish market insights.

Skills

Cybersecurity strategy

Risk management

Business development

Client relationship building

Leadership

Executive presence

Education

Bachelor's degree in information security, Computer Science, Business, Engineering, or related field

Tools

CISSP/CISM/CRISC/CISA

Job description

We are seeking a Managing Director to lead and expand our Cybersecurity Advisory practice serving the Private Equity (PE) sector. This executive will be responsible for driving growth, developing trusted relationships with PE sponsors and portfolio company executives, and delivering strategic cybersecurity advisory services that enhance investment outcomes and enterprise value.

The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities.

The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue.

Key Responsibilities

Business Development & Client Leadership

• Develop and execute the firm's Private Equity Cybersecurity Advisory growth strategy.
• Build and maintain C-suite and executive-level relationships with private equity sponsors, operating partners, investment professionals, and portfolio company leadership teams.
• Originate, qualify, and close new advisory engagements across the PE lifecycle.
• Serve as the executive sponsor for strategic client relationships and key accounts.
• Achieve individual and practice revenue, profitability, and growth objectives.
• Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services.

Transaction Advisory

• Lead cybersecurity diligence engagements for buy-side and sell-side transactions.
• Advise investors on cyber risks that may impact valuation, deal structure, integration strategy, or post-close investments.
• Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of prospective acquisition targets.
• Deliver actionable recommendations that enable informed investment decisions and accelerated value creation.

Portfolio Value Creation

• Partner with PE sponsors and portfolio company executives to develop cyber transformation and risk reduction roadmaps.
• Design and oversee cybersecurity improvement programs that support growth, scalability, and exit readiness.
• Guide executives in strengthening cyber governance, third-party risk management, incident response, cloud security, identity management, and regulatory compliance.
• Advise boards and management teams on cybersecurity strategy and enterprise risk.

Practice Leadership

• Build, lead, and mentor a team of cybersecurity consultants and engagement leaders.
• Establish methodologies, service offerings, intellectual property, and delivery standards.
• Drive recruitment, talent development, and succession planning initiatives.
• Contribute to overall firm strategy and participate as a senior member of the leadership team.

Thought Leadership

• Represent the firm in industry conferences, private equity events, and executive forums.
• Publish insights on cybersecurity trends, transaction-related cyber risks, and emerging threats affecting PE-backed organizations.
• Develop market-facing content that strengthens the firm's brand and market presence.

Qualifications

• Bachelor’s degree in information security, Computer Science, Business, Engineering, or related field.
• 15+ years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields.
• 7+ years serving private equity firms, investment organizations, or PE-backed portfolio companies.
• Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies.
• Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization.
• Demonstrated success generating and managing a significant consulting revenue portfolio.
• Deep understanding of cybersecurity strategy, risk management, governance, cloud security, resilience, and regulatory compliance.
• Experience leading cybersecurity due diligence and post-acquisition value creation initiatives.
• Strong executive presence with the ability to influence boards, investors, and C-suite stakeholders.
• Industry certifications such as CISSP, CISM, CRISC, CISA, or equivalent.
• Proven experience leading large consulting teams and complex client engagements.