Senior Strategy & Risk Consultant (Remote)

Optiv; Phoenix (AZ); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Work/life balance

Professional training resources

Volunteer Opportunities

Remote work capability

Job summary

Optiv is seeking a Sr. Consultant – Strategy & Risk to work fully remote in the continental U.S. You will lead advisory engagements, assess current-state capabilities, and develop multi-year cybersecurity and GRC strategies aligned with NIST, ISO, and other frameworks.

You will design governance structures, risk management programs, and mature insider risk initiatives, translating complex risks into actionable roadmaps and executive-level recommendations. Travel is expected as needed.

Qualifications

• Bachelor's degree and approximately 5-7 years of related work experience, preferably in a prior consultancy role.
• Experience leading cybersecurity strategy and transformation engagements, including current-state assessments, target-state capability design, cybersecurity operating models, strategic roadmaps, investment prioritization, and executive-level recommendations.
• Experience designing, implementing, or maturing enterprise cybersecurity and GRC programs across governance, risk management, controls, regulatory compliance, policy management, risk reporting, and cybersecurity metrics.
• Experience assessing or developing insider risk programs, including insider threat scenarios, governance, identity and access risks, data protection, behavioral or activity monitoring considerations, investigation and response processes, and cross-functional stakeholder engagement.
• Experience developing cyber asset intelligence, asset management, or attack surface management capabilities, including asset discovery, ownership, classification, criticality, vulnerability and exposure management, and integration of asset intelligence into cybersecurity risk decisions.
• Familiarity with GRC platforms and tools used to manage risks, controls, compliance evidence, and reporting; hands-on experience preferred.

Responsibilities

• Lead strategic cybersecurity advisory engagements to assess current-state capabilities, define target-state operating models, and develop multi-year cybersecurity and GRC strategies, transformation roadmaps, and prioritized investment plans.
• Advise clients on the design, development, and maturity of enterprise cybersecurity and GRC programs, including governance structures, risk frameworks, control environments, policies and standards, metrics, executive reporting, and program operating models.
• Design and mature insider risk programs by establishing governance, risk scenarios, monitoring and response processes, and cross-functional operating models that integrate cybersecurity, identity, data protection, HR, Legal, Privacy, and Compliance stakeholders.
• Develop executive-level cybersecurity strategies and business cases that translate cyber risk, control gaps, regulatory requirements, and emerging threats into prioritized initiatives, measurable outcomes, investment decisions, and actionable transformation roadmaps.
• Translate security operational and technical risks into business implications with recommendations for stakeholders.
• Collaborate with Principal Consultants and Technical Managers to support client objectives and maintain clear documentation of findings and recommendations.

Skills

Cybersecurity strategy

GRC programs

AI governance

Risk assessments

Executive communications

Regulatory compliance

Education

Bachelor's degree

Tools

GRC platforms

Job description

Optiv is seeking a Sr. Consultant – Strategy & Risk to work fully remote in the continental U.S. You will lead advisory engagements, assess current-state capabilities, and develop multi-year cybersecurity and GRC strategies aligned with NIST, ISO, and other frameworks.

You will design governance structures, risk management programs, and mature insider risk initiatives, translating complex risks into actionable roadmaps and executive-level recommendations. Travel is expected as needed.