Remote Senior Cyber Strategy & Risk Consultant

Optiv; Detroit (MI); Remote; USD 140,000 - 190,000; Full time

Job summary

Optiv is seeking a Sr. Consultant – Strategy & Risk to deliver security solutions and risk assessments for diverse clients. The role emphasizes AI governance, risk management, and advisory engagements with senior executives.

You will work remotely across the continental U.S., leading complex projects, conducting workshops, and developing multi-year cybersecurity and GRC strategies aligned with NIST and ISO standards.

Qualifications

• Bachelor's degree required; 5–7 years in related work experience, preferably in consultancy.
• Experience leading cybersecurity strategy and transformation engagements.
• Experience designing or maturing enterprise cybersecurity and GRC programs.
• Experience with AI governance, risk assessments, and third-party risk considerations.

Responsibilities

• Support clients in assessing risks from AI, including generative AI, and develop governance and risk mitigation recommendations.
• Develop AI governance policies, acceptable-use standards, and oversight processes.
• Strengthen GRC processes including risk registers, evidence collection, and remediation tracking.
• Lead strategic cybersecurity advisory engagements with target-state operating models and roadmaps.
• Advise on governance structures, control environments, policies, and metrics for cybersecurity programs.
• Design insider risk programs with governance, monitoring, and cross-functional operating models.

Skills

Cybersecurity strategy

GRC programs

Risk management

AI governance

Stakeholder management

Executive communication

Regulatory frameworks

engagement leadership

Education

Bachelor's degree

Tools

GRC platforms

Job description

Optiv is seeking a Sr. Consultant – Strategy & Risk to deliver security solutions and risk assessments for diverse clients. The role emphasizes AI governance, risk management, and advisory engagements with senior executives.

You will work remotely across the continental U.S., leading complex projects, conducting workshops, and developing multi-year cybersecurity and GRC strategies aligned with NIST and ISO standards.