Senior Cyber Risk Advisory Associate

Alvarez & Marsal; Houston (TX); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare plans

401(k) retirement plan

Paid time off

Job summary

Alvarez & M in Houston seeks a Senior Associate – Cyber Risk Advisory to help clients assess and reduce cyber risk across industries. You will evaluate maturity against frameworks, develop pragmatic roadmaps, and communicate risk in business terms.

Responsibilities include conducting program assessments, facilitating interviews with CISOs and leaders, supporting regulatory compliance, and contributing to client-ready deliverables.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Security and Risk Analysis, Computer Science, or related field.
• Experience in cyber risk advisory or cybersecurity consulting is preferred.
• Strong written and verbal communication skills required.

Responsibilities

• Plan and conduct cybersecurity program assessments against frameworks (NIST CSF, ISO/IEC 27001, NIST SP 800-53, CIS Controls).
• Facilitate interviews and workshops with CISOs and senior leaders.
• Support regulatory compliance efforts (NYDFS, HIPAA, GLBA, PCI DSS, SEC).
• Develop and refine security policies, standards, and risk management processes.
• Support risk quantification and prioritization of security investments.
• Develop incident response plans and tabletop exercises.
• Conduct third‑party and vendor cyber risk assessments.
• Assess AI governance, model/data security, and AI risk.
• Contribute to client‑ready deliverables and Board presentations.
• Manage workstreams and mentor junior staff.

Skills

Consulting experience

Communication

Travel readiness

Weekends/off hours flexibility

Team collaboration

Education

Bachelor’s degree in Cybersecurity, Information Systems, Security and Risk Analysis, Computer Science

Tools

Microsoft Office

Job description

Alvarez & M in Houston seeks a Senior Associate – Cyber Risk Advisory to help clients assess and reduce cyber risk across industries. You will evaluate maturity against frameworks, develop pragmatic roadmaps, and communicate risk in business terms.

Responsibilities include conducting program assessments, facilitating interviews with CISOs and leaders, supporting regulatory compliance, and contributing to client-ready deliverables.