Managing Director, Cyber Risk

Kroll; New York (NY); On-site; USD 300,000 - 520,000; Full time

Job summary

Kroll is seeking a Managing Director to grow its Cybersecurity Advisory practice for the Private Equity sector in New York. You will drive growth, build trusted PE relationships, and deliver strategic cybersecurity advisory to enhance investment outcomes and enterprise value.

The role combines business development, client leadership, thought leadership, and practice management with a focus on cyber risk assessment, governance, and mature security programs across PE portfolios.

Qualifications

• 15+ years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields.
• 7+ years serving private equity firms, investment organizations, or PE-backed portfolio companies.
• Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies.
• Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization.
• Demonstrated success generating and managing a significant consulting revenue portfolio.

Responsibilities

• Lead and expand the Cybersecurity Advisory practice for the Private Equity sector.
• Develop trusted relationships with PE sponsors and portfolio company executives.
• Originate, qualify, and close new advisory engagements across the PE lifecycle.
• Serve as executive sponsor for strategic client relationships and key accounts.
• Achieve revenue, profitability, and growth objectives for the practice.
• Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services.
• Lead cybersecurity diligence engagements for buy-side and sell-side transactions.
• Advise investors on cyber risks impacting valuation, deal structure, integration, or post-close investments.
• Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of targets.
• Deliver actionable recommendations for informed investment decisions and accelerated value creation.
• Partner with PE sponsors and portfolio company leaders to develop cyber transformation roadmaps.
• Design and oversee cybersecurity improvement programs to support growth and exit readiness.
• Guide executives on cyber governance, third-party risk, incident response, cloud security, identity management, and regulatory compliance.
• Advise boards on cybersecurity strategy and enterprise risk.
• Build and mentor a team of cybersecurity consultants and engagement leads.
• Establish methodologies, service offerings, and delivery standards.
• Drive recruitment, talent development, and succession planning.
• Contribute to firm strategy as a senior leadership member.
• Represent the firm at industry conferences and PE events, publishing insights on cyber risk trends.
• Develop market-facing content to strengthen brand and market presence.

Skills

Cybersecurity strategy

Risk management

Executive leadership

Business development

Client relationship management

Cybersecurity due diligence

Consulting revenue leadership

Education

Bachelor’s degree in information security / CS / engineering

Job description

We are seeking a Managing Director to lead and expand our Cybersecurity Advisory practice serving the Private Equity (PE) sector. This executive will be responsible for driving growth, developing trusted relationships with PE sponsors and portfolio company executives, and delivering strategic cybersecurity advisory services that enhance investment outcomes and enterprise value.

The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities.

The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue.

Key Responsibilities

Business Development & Client Leadership

• Develop and execute the firm's Private Equity Cybersecurity Advisory growth strategy.
• Build and maintain C-suite and executive-level relationships with private equity sponsors, operating partners, investment professionals, and portfolio company leadership teams.
• Originate, qualify, and close new advisory engagements across the PE lifecycle.
• Serve as the executive sponsor for strategic client relationships and key accounts.
• Achieve individual and practice revenue, profitability, and growth objectives.
• Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services.

Transaction Advisory

• Lead cybersecurity diligence engagements for buy-side and sell-side transactions.
• Advise investors on cyber risks that may impact valuation, deal structure, integration strategy, or post-close investments.
• Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of prospective acquisition targets.
• Deliver actionable recommendations that enable informed investment decisions and accelerated value creation.

Portfolio Value Creation

• Partner with PE sponsors and portfolio company executives to develop cyber transformation and risk reduction roadmaps.
• Design and oversee cybersecurity improvement programs that support growth, scalability, and exit readiness.
• Guide executives in strengthening cyber governance, third-party risk management, incident response, cloud security, identity management, and regulatory compliance.
• Advise boards and management teams on cybersecurity strategy and enterprise risk.

Practice Leadership

• Build, lead, and mentor a team of cybersecurity consultants and engagement leaders.
• Establish methodologies, service offerings, intellectual property, and delivery standards.
• Drive recruitment, talent development, and succession planning initiatives.
• Contribute to overall firm strategy and participate as a senior member of the leadership team.

Thought Leadership

• Represent the firm in industry conferences, private equity events, and executive forums.
• Publish insights on cybersecurity trends, transaction-related cyber risks, and emerging threats affecting PE-backed organizations.
• Develop market-facing content that strengthens the firm's brand and market presence.

Qualifications

• Bachelor’s degree in information security, Computer Science, Business, Engineering, or related field.
• 15+ years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields.
• 7+ years serving private equity firms, investment organizations, or PE-backed portfolio companies.
• Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies.
• Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization.
• Demonstrated success generating and managing a significant consulting revenue portfolio.
• Deep understanding of cybersecurity strategy, risk management, governance, cloud security, resilience, and regulatory compliance.
• Experience leading cybersecurity due diligence and post-acquisition value creation initiatives.
• Strong executive presence with the ability to influence boards, investors, and C-suite stakeholders.
• Industry certifications such as CISSP, CISM, CRISC, CISA, or equivalent.
• Proven experience leading large consulting teams and complex client engagements.