Cyber Strategy & Management Senior Associate

GT Org • Chicago, United States • 4w ago

Description

As a Cyber Strategy & Management Senior Associate, you will get the opportunity to grow and contribute to our clients' business needs by applying a collection of information and cybersecurity capabilities, including security and privacy, strategy, governance, IT risk, security testing, technology implementation/operations, cybercrime and breach response for the Cybersecurity & Privacy Practice – all with the resources, environment, and support to help you excel.

From day one, you’ll be empowered by the greater Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently.

Your day-to-day may include:

Support external client engagements from start to finish, which includes planning, fieldwork, and reporting.
Assist with performing and leading cybersecurity assessments consisting of cybersecurity capability assessments, threat and vulnerability assessments, network and security architecture reviews, and system configuration reviews.
Support cybersecurity incident response readiness activities, including tabletop exercises and evaluations of incident response capabilities.
Assist clients in planning and executing remediation plans identified in assessment activities.
Supervise team members and project workstreams.
Proactively interact with key client stakeholders to gather information, resolve problems, and make recommendations for improvements.
Remain current and apply knowledge of cybersecurity trends and risks.
Communicate and collaborate externally with clients and internally with all levels of the organization to successfully accomplish objectives portraying knowledge and confidence.
Participate in professional development activities and training sessions on regular basis.
Adhere to the highest degree of professional standards and strict client confidentiality.
Other job duties as assigned.

You have the following technical skills and qualifications:

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field is required.
Minimum 3 years of related cybersecurity experience in a similar consulting practice or function.
Experience executing and leading one or more of the overarching areas below:
- Assessing cybersecurity programs and capabilities against industry leading frameworks (e.g., NIST CSF, CRI Profile, ISO 27001).
- Reviewing security architecture deployments and assessing and/or implementing secure configurations for network and infrastructure components (including both on-premises and cloud environments).
- Performing cybersecurity risk assessments
- Supporting cybersecurity remediation activities
- Assessing and/or implementing security solutions and controls across both on-premises and cloud network environments.
- Performing technical security testing (e.g., vulnerability assessments, penetration testing)
Familiarity with cybersecurity industry leading practices and frameworks, such as NIST CSF, CRI Profile, CIS Controls, CIS Benchmarks, OWASP, MITRE.
Strong professional verbal and written skills.
Exceptional client service, communication, analytical, and organizational skills.
Strong project management skills and the ability to execute multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
Can travel as needed.