Senior Cyber Risk & AI Governance Advisor

Alvarez & Marsal; New York (NY); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

401(k) retirement plan

Job summary

Alvarez & Marsal seeks a Senior Associate in Cyber Risk Advisory to help clients assess and reduce cyber risk across industries. You will evaluate maturity against control frameworks, develop pragmatic roadmaps, and communicate risk in business terms.

The role involves regulatory compliance support, incident response planning, and third-party risk reviews. You will work with CISOs, IT, risk, and legal teams, delivering client-ready assessments and executive summaries.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Security and Risk Analysis, Computer Science, or a related field.
• Approximately 4–7 years of relevant experience in cyber risk advisory, cybersecurity consulting, governance, risk and compliance, or information security.
• Minimum of two years of consulting experience (Big Four, specialist advisory firm, or equivalent professional services environment).
• Working knowledge of control frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001/27002, CIS Controls, HIPAA, PCI DSS, or NYDFS 23 NYCRR 500.
• Proficiency with Microsoft Office tools, particularly PowerPoint, Word, and Excel.
• Ability to facilitate interviews and workshops with senior stakeholders and to produce high-quality written deliverables.

Responsibilities

• Plan and execute cybersecurity program assessments to evaluate current-state maturity against frameworks and develop future-state recommendations and roadmaps.
• Facilitate stakeholder interviews and workshops with CISOs, IT, risk, legal, and business leaders to understand the control environment and document findings.
• Support regulatory compliance and remediation efforts, including NYDFS Part 500, HIPAA, GLBA, PCI DSS, SEC cyber disclosure expectations, and other applicable requirements.
• Develop and refine security and privacy policies, standards, governance models, operating models, and risk management processes.
• Develop incident response plans, playbooks, and crisis communications procedures, and plan and facilitate tabletop exercises.

Skills

Cyber risk advisory experience

Microsoft Office (PowerPoint, Word, Ex

Strong written and verbalcommunication

Stakeholder interviews/workshops facil

Education

Bachelor’s degree in Cybersecurity, Information Systems, Security and Risk Analysis, Computer Science, or related field

Tools

GRC platforms

Job description

Alvarez & Marsal seeks a Senior Associate in Cyber Risk Advisory to help clients assess and reduce cyber risk across industries. You will evaluate maturity against control frameworks, develop pragmatic roadmaps, and communicate risk in business terms.

The role involves regulatory compliance support, incident response planning, and third-party risk reviews. You will work with CISOs, IT, risk, and legal teams, delivering client-ready assessments and executive summaries.