Senior Consultant - Risk Advisory (Cyber, Tech, and Operational Risk)

Remote; San Francisco (CA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Remote seeks a Senior Consultant to drive risk strategy across cyber, technology, and operational risk for diverse clients. You will design, build, execute, and assess risk programs while mentoring teams and delivering high-quality, data-driven results.

This hybrid role involves working on client sites or in the office, with travel up to 20–30% domestically, and collaborating with CrossCountry teams on risk transformation, controls, audit, and regulatory readiness.

Qualifications

• 2+ years in professional services (consulting or advisory).
• Knowledge of major cyber, technology, and operational risk frameworks.
• Understanding of governance, policies, and controls.
• Willingness to travel domestically up to 20%–30%.

Responsibilities

• Provide client service and manage client relationships between clients and project teams.
• Apply knowledge in cyber, technology, cloud, and operational risk domains.
• Lead the development of data-driven deliverables to solve client problems.
• Structure and synthesize research on industry developments to inform deliverables, proposals, and strategies.
• Lead CrossCountry engagements in Risk Transformation, Risks & Controls, Internal Audit, Regulatory Compliance, and reporting.

Skills

Cybersecurity

Technology risk

Operational risk

Risk frameworks

Regulatory compliance

Data privacy

Education

Bachelor’s degree

Job description

Defining the future of work & living globally

5,637 jobs · 6 companies

Senior Consultant - Risk Advisory (Cyber, Tech, and Operational Risk)

In this role, you’ll have the opportunity to drive positive impacts through the design, build, execution, and assessment of risk programs across cyber, technology, and operational risk (non-financial risk) domains.

We are looking for passionate self-starters who enjoy learning and staying current with industry trends and technologies, excel at leading teams and mentoring others, and get excited about helping our clients strategically solve complex risk challenges.

What You'll Do:

Provide excellent client service and develop and nurture client relationships, serving as a liaison between clients and project teams, understanding their business needs, and delivering responsive and high-quality service

Apply specialized knowledge in particular non-financial risk domains, and broad acumen across facets of all domains including cybersecurity, technology, cloud, operational resiliency, data, third party, privacy, and product risk

Collaborate to help lead development of compelling, easy-to-consume, data-driven deliverables that pragmatically solve client problems

Structure, implement, and synthesize research and analysis on a range of key industry developments and trends to inform client deliverables, proposals, marketing materials, and market strategies

Lead CrossCountry teams on engagements such as:

Risk Transformation: Maturity assessments and roadmaps; operating models; program and process builds; executive advisory

Risks & Controls: Risk assessments; frameworks; RCSAs; testing methodologies; testing execution and reporting

Internal Audit: Audit planning, execution, and reporting

Regulatory Compliance: Regulatory mapping and horizon scanning; compliance readiness and remediation activities; exam and reporting support

Reporting & Metrics: KPI and KRI development; automation and operations; dashboards and reporting; risk appetite analysis

What You'll Bring:

2+ years prior experience in professional services (public accounting, advisory firm, or management consulting firm)

A working knowledge with major cybersecurity, technology, and operational risk frameworks and standards such as NIST CSF, CRI Cybersecurity Profile, CSA Cloud Controls, ISO 27000 series, COBIT, and Basel Operational Risk Principles

Understanding of comprehensive risk management programs, including governance, policy, organizational design, awareness and training, architecture, technologies, processes, and controls

Passion for learning new technologies and staying current with trends in cyber, technology, and operational risk management.

Qualifications:

Bachelor’s degree from an accredited university

Professional certification (CISA, CISM, CISSP, CIPT, CIPP, CIPM).

Willingness to travel domestically up to 20%-30% (varies by client).

Availability to work on client site or in office 3 days a week, with 2 days remote (hybrid environment).