Remote Senior Cyber Strategy & Risk Consultant

Optiv; Richmond (VA); Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Work/life balance

Professional training resources

Volunteer Opportunities

Remote work ability

Job summary

Optiv is seeking a Sr. Consultant – Strategy & Risk for a fully remote role across the continental U.S. You will lead strategic security advisory engagements, assess risk, and help clients build mature GRC programs and AI governance frameworks.

Responsibilities include defining target-state models, roadmaps, and executive reporting, while collaborating with stakeholders and delivering tangible security improvements aligned with frameworks like NIST, ISO 27001, and COSO.

Qualifications

• Bachelor's degree required; 5–7 years in related work experience preferably in consulting.
• Experience leading cybersecurity strategy and transformation engagements.
• Experience designing or maturing enterprise cybersecurity and GRC programs across governance, risk management, controls, and policy management.
• Experience with insider risk programs and data protection considerations.

Responsibilities

• Lead strategic cybersecurity advisory engagements and develop multi‑year transformation roadmaps.
• Advise clients on governance structures, risk frameworks, controls, and executive reporting.
• Develop insider risk programs with governance, monitoring, and cross‑functional integration.
• Assess AI governance and risk, and create governance policies and controls.
• Provide client workshops, stakeholder interviews, and clear documentation of findings.

Skills

Cybersecurity strategy

Governance & risk management

AI governance

Client engagement

Regulatory frameworks

NIST/ISO knowledge

Education

Bachelor's degree

Tools

GRC platforms

Job description

Optiv is seeking a Sr. Consultant – Strategy & Risk for a fully remote role across the continental U.S. You will lead strategic security advisory engagements, assess risk, and help clients build mature GRC programs and AI governance frameworks.

Responsibilities include defining target-state models, roadmaps, and executive reporting, while collaborating with stakeholders and delivering tangible security improvements aligned with frameworks like NIST, ISO 27001, and COSO.