Cyber Strategy and Risk Advisory Consultant

Cyber Strategy and Risk Advisory Consultant

The Opportunity:

The cyber landscape is continuously changing due to several driving factors, such as dynamic cyber threats, hyperconnected technologies, such as IT, OT, IoT, and Product, technology change, cloud migration, and regulatory reform. As a result, organizations are facing increased pressure, both internally and externally, to regularly assess and improve their cybersecurity posture and mitigate their risk exposure.

Organizations look to Booz Allen to transform their approach to cybersecurity using next-generation techniques and tools grounded in next-generation threat and risk modeling, advanced analytics, and cyber risk quantification. As a member of Booz Allen’s Cyber Risk practice, you will belong to and provide strategic direction to a network of professionals helping clients transform and align their cybersecurity and risk management functions to the business to drive strategic decisions and investments.

Together, we align these functions with business objectives, empower strategic decision-making, and optimize cyber-ROI investments. In addition to these responsibilities, you will serve as a strategic risk advisor, enhancing Booz Allen’s innovative strategies to help mitigate risks and enhance resilience for our clients. As a leading authority in cybersecurity, Booz Allen is uniquely positioned to guide organizations through this evolving landscape. Our mission goes beyond simply helping enterprises protect themselves, we strive to ensure they also gain a material return from their cybersecurity investments.

Join us at Booz Allen and become a catalyst for change in cybersecurity, driving client service excellence and innovation across organizations worldwide with a focus on Fortune 500 and Global 1000 corporations across all major industries, such as automotive, energy, oil and gas, healthcare, financial services, pharma, software, and high-tech.

Join us. The world can’t wait. 

You Have:

• 3+ years of experience supporting enterprise consulting engagements with Fortune 500 and Global 1000 clients and delivering results to senior stakeholders, including industry best practices and standards across cybersecurity and risk management disciplines providing high-quality service and building strong client relationships

• 2+ years of experience in a consulting role or in a client or customer service delivery role, including executing cybersecurity assessments against industry frameworks, such as NIST CSF, NIST 800-53, and ISO 27001, and identifying root cause issues and recommending risk-aligned remediations that extend beyond basic control gaps to uplift our client’s cyber resilience

• 2+ years of experience authoring technical reports, presentations, and briefs based on performed cybersecurity or risk assessments, including communication of findings and recommendations

• Experience identifying technology vulnerabilities using both manual and automated processes, including automated compliance and vulnerability scanners and system configuration reviews

• Experience with security GRC practices, including risk management frameworks, regulatory requirements, and industry standards, such as NIST CSF or NIST 800-53

• Ability to work in a team-oriented environment and drive collaboration and productivity

• Ability to analyze complex security issues, develop effective mitigations, and frame results to strategic audiences, including effective storytelling

• Ability to convey complex technical information to diverse audiences

• Bachelor's degree

Nice If You Have:

• Experience working for a Technology or Management Consulting Firm and with SOC or threat hunting, including detecting, analyzing, and mitigating cyber threats effectively

• Experience with application security and testing, including secure coding practices and vulnerability assessment methodologies, administering and assessing network devices and security controls, including network security management and configuration, and with Windows or Linux system administration, including managing and securing operating systems effectively

• Knowledge of security standards, such as Center for Internet Security (CIS) and DoD Security Technical Implementation Guide (STIG), and industry best practices and compliance requirements

• Knowledge of cybersecurity functions, such as asset management, identity and access management, cloud security, network security, security operations, and incident response, and