Senior Associate Cybersecurity Consultant

Summary

Acrisure Cyber Services is a technology partner providing cybersecurity, technology risk, and digital transformation services. The Senior Associate Cybersecurity Consultant supports clients by assessing cyber capabilities, developing strategic recommendations, and delivering solutions that improve governance, risk management, regulatory compliance, and operational effectiveness.

Responsibilities

• Conduct cybersecurity and technology risk assessments across client environments
• Perform cybersecurity maturity assessments and benchmark organizations against industry frameworks and leading practices
• Develop cybersecurity strategies, operating models, policies, standards, and implementation roadmaps
• Enable regulatory compliance, governance, and control improvement initiatives
• Advise clients on emerging technology risks, including artificial intelligence (AI), cloud computing, and digital transformation initiatives
• Develop executive-ready reports, presentations, and recommendations for senior leadership
• Facilitate client workshops, interviews, and stakeholder discussions
• Manage project work-streams and mentor junior team members
• Support business development activities, proposal efforts, thought leadership, and practice development initiatives

Skills

• At least 3+ years of experience in cybersecurity consulting, cyber risk, technology risk, information security, or related advisory services
• Excellent written and oral communication skills
• Experience in organizing and conducting cybersecurity risk assessments, maturity assessments, and compliance reviews
• Experience in working with client management teams and briefing client leadership
• Strong analytical, problem-solving, and critical thinking skills
• Excellent written and verbal communication skills
• Ability to translate assessment findings into actionable business recommendations
• Experience in requirements gathering, reporting writing, interacting with client stakeholders and presenting findings to leadership
• Demonstrated ability to manage multiple projects and priorities and deliver high-quality work in a fast-paced environment
• Cybersecurity strategy and governance
• Technology and cyber risk management
• Regulatory compliance and control assessments
• AI security and governance
• Cloud security
• Security metrics and reporting
• Cybersecurity operating model design
• Financial services, critical infrastructure, healthcare, or other highly regulated industries
• Familiarity with Frameworks and Standards
• Various NIST Standards and Frameworks (e.g. SP 800-53, Cybersecurity Framework, etc.)
• Cyber Risk Institute (CRI) Profile
• ISO 27001
• ISO 31000
• PCI DSS
• CIS Critical Security Controls
• AI Risk Management Framework
• EU NIS-2, GDPR
• Various US State Level Security and Governance Frameworks
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• AWS Certified Cloud Practitioner or equivalent cloud certification
• AAIS (Certified Advanced in AI Audit)
• Other cybersecurity, risk, cloud, or governance-related certifications

Qualifications

Must Haves

• At least 3+ years of experience in cybersecurity consulting, cyber risk, technology risk, information security, or related advisory services
• Excellent written and oral communication skills
• Experience in organizing and conducting cybersecurity risk assessments, maturity assessments, and compliance reviews
• Experience in working with client management teams and briefing client leadership
• Strong analytical, problem-solving, and critical thinking skills
• Excellent written and verbal communication skills
• Ability to translate assessment findings into actionable business recommendations
• Experience in requirements gathering, reporting writing, interacting with client stakeholders and presenting findings to leadership
• Demonstrated ability to manage multiple projects and priorities and deliver high-quality work in a fast-paced environment

Nice to Haves

• Cybersecurity strategy and governance
• Technology and cyber risk management
• Regulatory compliance and control assessments
• AI security and governance
• Cloud security
• Security metrics and reporting
• Cybersecurity operating model design
• Financial services, critical infrastructure, healthcare, or other highly regulated industries
• Familiarity with Frameworks and Standards
• Various NIST Standards and Frameworks (e.g. SP 800-53, Cybersecurity Framework, etc.)
• Cyber Risk Institute (CRI) Profile
• ISO 27001
• ISO 31000
• PCI DSS
• CIS Critical Security Controls
• AI Risk Management Framework
• EU NIS-2, GDPR
• Various US State Level Security and Governance Frameworks
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• AWS Certified Cloud Practitioner or equivalent cloud certification
• AAIS (Certified Advanced in AI Audit)
• Other cybersecurity, risk, cloud, or governance-related certifications

Benefits

• Multiple medical plan options, including PPO and HSA-compatible plans
• Dental and vision coverage
• Employer-paid basic life and disability insurance
• 401(k) retirement plan
• Flexible spending and health savings account options
• Paid time off, holidays, and additional leave programs
• Access to wellness resources, support programs, and employee discounts
• Remote work arrangement
• Company sponsored events at your location
• Learning, growing, and mentoring opportunities