Senior Cyber Risk Advisory Consultant

Alvarez & Marsal; Philadelphia (Philadelphia County); On-site; USD 85,000 - 120,000; Full time

Job summary

Alvarez & Marsal (A&M) is seeking a Senior Associate in Cyber Risk Advisory within the Global Cyber Risk Services team. You will evaluate cybersecurity programs, work with boards and leadership, and deliver pragmatic, prioritized roadmaps that address regulatory expectations.

You will assess maturity against frameworks, perform risk assessments, and support buy‑side/sell‑side cybersecurity due diligence. Strong communication and project management are essential.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Security and Risk Analysis, Computer Science, or a related field.
• Minimum of two years of consulting experience in cyber risk advisory, governance, risk and compliance, or information security.
• Strong written and verbal communication skills; ability to translate complex risks into business terms.

Responsibilities

• Plan and perform cybersecurity program assessments against NIST CSF 2.0, ISO/IEC 27001, NIST SP 800-53, CIS Controls and sector requirements.
• Lead stakeholder interviews with CISOs, IT, risk, legal and business leaders to document findings.
• Support regulatory compliance and remediation efforts, including NYDFS Part 500, HIPAA, GLBA, PCI DSS and other requirements.
• Develop and refine security and privacy policies, standards, governance models, and risk management processes.
• Develop incident response plans and run tabletop exercises; manage third‑party cyber risk assessments.

Skills

Cyber risk advisory

Stakeholder management

Regulatory compliance

Cybersecurity frameworks

Communication skills

Education

Bachelor’s degree in relevant field

Job description

Alvarez & Marsal (A&M) is seeking a Senior Associate in Cyber Risk Advisory within the Global Cyber Risk Services team. You will evaluate cybersecurity programs, work with boards and leadership, and deliver pragmatic, prioritized roadmaps that address regulatory expectations.

You will assess maturity against frameworks, perform risk assessments, and support buy‑side/sell‑side cybersecurity due diligence. Strong communication and project management are essential.