Kroll

Lead Kroll's Virtual CISO and Cyber Advisory engagements, advising clients on cybersecurity strategy, governance, risk, resilience, and regulatory readiness while growing the practice and overseeing delivery teams. | Requires senior cybersecurity or CISO leadership experience, expertise in cyber risk and security frameworks and regulations, executive advisory and business development capability, and team leadership. | In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and high-profile matters in the world. With experts based globally and supported by advanced technology, we help protect our clients’ data, people, operations, and reputation through assessments, investigations, intelligence, and strategic advisory services. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, framework assessments, expert testimony, privacy program building and a myriad of other advisory efforts. We are seeking a Director to help lead and grow Kroll's US Virtual CISO and Cyber Advisory practice. This individual will serve as a strategic security leader for a portfolio of clients, acting as a trusted advisor to executive leadership teams, boards, and security stakeholders. The successful candidate will be responsible for delivering and scaling Virtual CISO services, helping organizations strengthen governance, mature security programs, manage cyber risk, improve resilience, and align cybersecurity investments with business objectives. The role combines executive advisory, program leadership, client relationship management, team leadership, and business development Responsibilities As a Director, you will: • Serve as the designated Virtual / fractional CISO for a portfolio of clients across multiple industries. • Act as a trusted advisor to boards, executive leadership teams, CISOs, CIOs, and risk leaders on cybersecurity strategy, governance, risk, resilience, and regulatory obligations. • Provide ongoing cyber leadership and strategic guidance to clients lacking full-time CISO capabilities or requiring additional executive-level support. • Develop and present cybersecurity roadmaps aligned to business objectives, risk appetite, regulatory requirements, and technology strategy. • Deliver board and executive reporting on cyber risk posture, emerging threats, key initiatives, investment priorities, and program maturity. • Lead security strategy development, governance transformation, risk management enhancements, cyber maturity assessments, and security operating model design. • Advise clients on security organization structure, target operating models, staffing strategies, and capability development. • Guide security investment planning, prioritization and budget justification activities. • Support clients in developing and improving security policies, standards, governance frameworks and performance metrics. • Lead advisory engagements relating to cyber resilience, third-party risk management, regulatory readiness, incident preparedness, security governance and operational resilience. • Support executive management teams in cyber crisis preparation, tabletop exercises, incident response readiness, and recovery planning. • Advise on AI governance, AI security, cloud security governance, technology risk management and emerging cyber risks. • Lead cyber maturity assessments, security program reviews, risk assessments, and gap analyses against leading industry standards and frameworks such as NIST CSF, ISO 27001, CIS Controls, SOC 2, FFIEC, NYDFS Cybersecurity Regulation, SEC cyber disclosure expectations, HIPAA, and other relevant US regulatory or sector-specific requirements. • Identify opportunities to expand vCISO relationships into broader cybersecurity, resilience, technology risk and compliance engagements. • Support proposal development, client presentations, account planning and strategic growth initiatives. • Contribute to thought leadership and market-facing content focused on cybersecurity leadership, governance and executive risk management. • Oversee delivery teams, manage engagement quality, review fieldwork and deliverables, and ensure outputs meet Kroll’s standards for technical depth, commercial relevance, and executive clarity. • Mentor and develop consultants supporting vCISO and other adivisory engagements. • Establish methodologies, playbooks, reporting models and quality standards for the vCISO service offering. • Build strong relationships across Kroll’s global Cyber Risk business to bring the best of the firm to clients and support cross-border opportunities where relevant. • Support capability growth across Kroll's broader Cyber Advisory practice. Qualifications • Significant experience in cybersecurity consulting, cyber risk management, information security, technology risk, AI Security/Governance, resilience, regulatory advisory, and/or related professional services roles. • Strong experience serving in a CISO, Deputy CISO, Head of Security, Security Director, vCISO, or senior cybersecurity consulting leadership role. • Demonstrated ability to engage directly with boards, executive leadership teams, regulators, auditors, investors, and client stakeholders. • Experience designing, leading, operating or transforming enterprise cybersecurity programs. • Strong understanding of cybersecurity governance, operating models, technology risk, resilience, third-party risk, incident preparedness and security leadership. • Proven ability to translate technical cybersecurity issues into business-focused risk and investment decisions. • Strong knowledge of cyber strategy, governance, risk management, security operating models, control frameworks, incident readiness, third-party risk, cyber resilience, and security program maturity. • Experience advising clients on leading cybersecurity frameworks, standards, and US regulatory or industry requirements, including NIST, ISO 27001, CIS Controls, SOC 2, NYDFS, FFIEC, HIPAA, SEC-related cyber disclosure considerations, and other relevant frameworks. • Proven ability to engage confidently with senior executives, boards, CISOs, CIOs, legal counsel, risk leaders, and business stakeholders. • Strong commercial mindset, with experience supporting business development, proposals, account growth, client relationship management, and market-facing initiatives. • Experience leading, coaching, and developing teams as part of both client delivery and broader practice growth. • Excellent written and verbal communication skills, with the ability to produce clear, executive-ready deliverables and present complex topics in a concise, business-focused manner. • Ability to manage multiple engagements, priorities, deadlines, and stakeholders effectively. • Ability to travel as required to support client delivery, business development, and internal initiatives. Candidate Profile Above all, Kroll expects senior candidates to be strategic, commercially minded, intellectually curious, collaborative, and confident operating with senior clients. The successful candidate will be comfortable moving between board-level advisory, hands-on program design, team leadership, and business development. This is an opportunity to play a meaningful role in scaling Kroll’s US Cyber Strategy and Risk Consulting practice, helping clients address their most important cyber, technology, governance, and resilience challenges. Your recruiter will be happy to walk you through your U.S.-specific benefits, which include: • Healthcare Coverage: Comprehensive medical, dental, and vision plans. • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. • Retirement Plans: 401(k) plans with company matching. Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position. About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. In order to be considered for a position, you must formally apply via careers.kroll.com. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. The current salary range for this position is $200,000 to $250,000

Manage incident response engagements, mentor junior staff, and maintain client relationships. | 3+ years incident response experience, strong digital forensics and malware analysis skills, professional certifications preferred, and project management abilities. | At Kroll, your work will help deliver clarity to our clients’ most complex governance, risk, and transparency challenges. Apply now to join One team, One Kroll.     Kroll’s elite security leaders deliver rapid responses for over 3,000 incidents per year and have the resources and expertise to support the entire incident lifecycle, including litigation demands.    We are looking for talented individuals with solid knowledge of Digital Forensics and Incident Response to join our Cyber & Data Resilience Practice as a Senior Associate! As a Senior Associate at Kroll, you will provide support and guidance to a wide variety of clients in managing their Incident Response Engagement.  You will work alongside accomplished senior staff, enhancing your own DFIR expertise and delivering excellent service. You will be part of an award-winning and respected team supporting a global network of clients and colleagues.     Day-to-Day Responsibilities * Delivery of strong technical skills in support of cyber defense or incident response assignments. * Supports the Case Manager in the effective running of an assignment through to its closure, providing input to structuring projects, managing resources, presenting findings and providing commercially viable advice to the client. * Monitors quality of own work and that of the assignment team, and ensures value is delivered to the client.  * Communicates regularly to senior members of the team, bringing case issues and findings to attention of appropriate personnel for resolution and decision making. * Develop and maintain key client relationships, ensuring Kroll’s high standards of service and integrity are adhered to at all times. * Support the development of junior staff by acting as mentor and ensuring Kroll’s high standards are met at all times. * Ensure Key Performance Indicators (consisting of utilization rates, business generation and personal objectives) are consistently achieved. * Identify own learning needs and opportunities, and continuously seek to improve personal performance.   Essential Traits: * We are currently looking for individuals that hold the following skill and expertise: * Incident Response * Computer Forensics * Malware Reverse Engineering * Network Security * Computer Security Audit * The individual must possess excellent project management skills, with ability to communicate effectively and build strong working relationships with both clients and colleagues across Kroll’s network of offices. * The role may require frequent travel  * Recommended three (3) years incident response experience investigating and remediating cyber breaches, preferably in a consultancy position. * Desired qualifications: CREST IR, CFCE, ENCE, GIAC or other certification(s) would be beneficial (GCFA, GCIH, GREM, GNFA). * Fluency in English is required together with fluency or native capability in the language of the country in which they will be based.   * Extensive experience of managing complex cases and successfully managing resources and budget. * Ability to drive forward and co-ordinate a number of concurrent projects and tasks, managing competing demands. * Clarity of thought and expression to win confidence from key stakeholders and colleagues. * A highly professional and commercial approach to problem solving. * Due to the range of assignments that you will manage across various industry-sectors and country locations, a key interest in global events and markets, with an awareness of working across different cultural and political environments is essential. * Excellent written and verbal communication skills that help represent diverse communities. * Experience working with diverse teams.   Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:   * Healthcare Coverage: Comprehensive medical, dental, and vision plans. * Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. * Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. * Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. * Retirement Plans: 401(k) plans with company matching.   Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.   About Kroll    Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.    In order to be considered for a position, you must formally apply via careers.kroll.com.   We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.   The current salary range for this position is $100,000 to $150,000     #LI-CN1 #LI-Remote

Lead and deliver cybersecurity consulting and advisory services focused on third-party risk management, cyber risk assessments, governance, and resilience for clients. | Experience in cybersecurity consulting, third-party risk management, cyber risk assessments, governance, and regulatory compliance with strong client-facing and leadership skills. | In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers - in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, data-driven framework design and assessments, expert testimony, privacy program building and a myriad of other advisory efforts. Kroll's Cyber Advisory practice is seeking a Senior Manager to support the continued growth of our Cyber Advisory business, with a primary focus on Third-Party Risk Management (TPRM), cyber risk assessments, governance, resilience, and security program advisory services. The successful candidate will be a trusted advisor to clients, leading TPRM and cyber risk engagements, supporting executive stakeholders, delivering high-quality advisory services, and helping clients strengthen their security posture, resilience, and regulatory readiness. This role combines client delivery, project leadership, people management, service development and business development support within Kroll's broader Cyber Advisory practice. Responsibilities Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. We are looking for bright, inquisitive minds who are experienced in and passionate about cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provide leadership and strategic guidance when and where it is needed the most. • Own delivery and operational performance for managed TPRM programs, including assessment throughput, service level adherence, quality assurance, remediation tracking, client satisfaction, and continuous improvement initiatives. • Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying sectors, size, scope, and complexity. • Lead delivery of cyber-focused Third-Party Risk Management (TPRM) / Managed TPRM engagements across multiple industries and client segments. • Design, assess, and optimize Third-Party Risk Management operating models, governance structures, policies, standards, lifecycle processes, risk-tiering methodologies, and managed service delivery frameworks. Conduct supplier cyber risk assessments, vendor due diligence reviews, and third-party security evaluations. • Assess third-party cybersecurity controls against leading frameworks and industry standards. • Conduct cybersecurity due diligence assessments for mergers, acquisitions, carve-outs, divestitures, and private equity transactions, evaluating cyber risk exposures, operational dependencies, and remediation requirements. • Leverage and advise clients on TPRM, GRC, continuous monitoring, and cyber risk platforms including ServiceNow, Archer, OneTrust, ProcessUnity, Panorays, Black Kite, BitSight, Interos.AI, and similar technologies. • Design assessment workflows, questionnaire rationalization approaches, control mappings, evidence collection processes, and automated risk-scoring methodologies. • Support clients in aligning TPRM programs with evolving regulatory requirements and operational resilience expectations. • Develop executive reporting, board-level dashboards, key risk indicators (KRIs), quantitative risk metrics, portfolio-wide benchmarking, and management reporting that translates technical findings into business, operational, financial, and regulatory impacts. • Lead cybersecurity risk assessments, security program reviews, cyber maturity assessments, and gap analyses. • Assess client environments against frameworks including NIST CSF, ISO 27001, CIS Controls, FFIEC, NYDFS, SOC 2, and other applicable standards. • Develop and enhance cyber risk management frameworks, governance models, policies, standards, procedures, and data-driven risk management processes while providing practical guidance for implementation and operationalization. Help clients identify, prioritize, and remediate cyber and technology risks through practical risk reduction roadmaps. • Support security strategy, operating model design, and cyber transformation initiatives. • Lead supplier resilience, concentration-risk, dependency mapping, fourth-party risk, recovery preparedness, and operational resilience assessments, helping organizations align cyber risk management activities with broader business continuity objectives. • Facilitate workshops with business, technology, security, risk, and resilience stakeholders. • Act as day-to-day engagement lead across multiple client projects. • Manage project teams, workplans, budgets, timelines, deliverables, and quality assurance activities. • Develop trusted client relationships and serve as a key point of contact during engagements. • Support development of proposals, statements of work, and client presentations. • Identify opportunities to expand client relationships across Kroll's broader Cyber Risk and Advisory offerings. • Support creation of thought leadership, market-facing content, and industry presentations. • Mentor, coach, and support junior consultants and managers. • Contribute to methodology development, quality assurance, and practice growth initiatives. • Analyze threat intelligence, attack surface monitoring, security ratings, continuous monitoring data, and assessment results to identify emerging risks, prioritize remediation activities, and support executive decision-making. • Assess risks related to artificial intelligence, generative AI, machine learning, and emerging technologies, including governance, data protection, model risk management, and responsible AI practices. • Effectively communicate findings, reports, training and strategies to technical staff, executive leadership, legal counsel, and to both internal and external clients. • Work with sales and marketing teams to support the development of new business opportunities. Qualifications • Experience designing, implementing, optimizing, or administering TPRM, GRC, continuous monitoring, or cyber risk management platforms. • Significant experience in cybersecurity consulting, third-party risk management, technology risk, information security, operational resilience, or related advisory services. • Strong experience designing, assessing, implementing, or managing Third-Party Risk Management programs and managed services. • Experience conducting cyber risk assessments, supplier security reviews, or technology risk assessments. • Working knowledge of cybersecurity frameworks and regulatory requirements including NIST CSF, NIST 800-171, ISO 27001, CIS Controls, PCI DSS, HIPAA Security Rule, SOC 2, FFIEC, NYDFS, SEC Cybersecurity Rules, DORA, NIS2, and related global regulations. • Understanding of supplier cyber risk, cloud risk, concentration risk, vendor governance, and resilience concepts. • Experience presenting findings and recommendations to senior client stakeholders. • Ability to manage multiple engagements simultaneously while maintaining quality and client satisfaction. • Experience leading project teams and mentoring junior staff. • Commercially minded with experience supporting proposals, business development, and account growth activities. • Professional qualifications and/or proven experience in IT/ Information Security, TPRM, GRC / Risk Management, Vulnerability Management, Incident Response, and/or Regulatory Compliance roles. • Demonstrated ability to analyze large datasets, develop risk models, create management reporting dashboards, and derive actionable risk insights using tools such as Excel, Tableau, Power BI, SQL, Python, or comparable analytics platforms. • Good knowledge of the security threat landscape, control frameworks and cyber resilience strategies. • Demonstrated ability to design pragmatic risk management, governance, and resilience solutions leveraging people, process, data, and technology. • Strong written and verbal communication and presentation skills, teamwork, and client relationship skills. • Experience in client-facing roles and experience in engaging with senior stakeholders in organizations (desirable but not mandatory). • Experience in high-quality delivery to tight timescales. • Ability to multi-task, prioritize, and manage time effectively. • Experience working with diverse teams • Ability to travel up to 25% as required Above all, the ideal candidate combines strong cybersecurity knowledge with practical experience managing third-party risk and advising clients on governance, resilience, and risk management challenges. Successful candidates will be comfortable operating between detailed assessment activities and executive-level discussions, helping clients translate cyber risks into prioritized business actions. They will bring a collaborative approach, strong client-facing skills, and a desire to contribute to the continued growth of Kroll's Cyber Advisory practice. Your recruiter will be happy to walk you through your U.S.-specific benefits, which include: • Healthcare Coverage: Comprehensive medical, dental, and vision plans. • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. • Retirement Plans: 401(k) plans with company matching. Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position. About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. In order to be considered for a position, you must formally apply via careers.kroll.com. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. The current salary range for this position is $150,000 to $200,000

Lead and deliver cybersecurity advisory services focused on third-party risk management and cyber risk assessments for clients. | Requires significant cybersecurity consulting experience, expertise in TPRM, governance, risk management frameworks, and client-facing advisory skills. | In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers - in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, data-driven framework design and assessments, expert testimony, privacy program building and a myriad of other advisory efforts. Kroll's Cyber Advisory practice is seeking a Senior Manager to support the continued growth of our Cyber Advisory business, with a primary focus on Third-Party Risk Management (TPRM), cyber risk assessments, governance, resilience, and security program advisory services. The successful candidate will be a trusted advisor to clients, leading TPRM and cyber risk engagements, supporting executive stakeholders, delivering high-quality advisory services, and helping clients strengthen their security posture, resilience, and regulatory readiness. This role combines client delivery, project leadership, people management, service development and business development support within Kroll's broader Cyber Advisory practice. Responsibilities Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. We are looking for bright, inquisitive minds who are experienced in and passionate about cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provide leadership and strategic guidance when and where it is needed the most. • Own delivery and operational performance for managed TPRM programs, including assessment throughput, service level adherence, quality assurance, remediation tracking, client satisfaction, and continuous improvement initiatives. • Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying sectors, size, scope, and complexity. • Lead delivery of cyber-focused Third-Party Risk Management (TPRM) / Managed TPRM engagements across multiple industries and client segments. • Design, assess, and optimize Third-Party Risk Management operating models, governance structures, policies, standards, lifecycle processes, risk-tiering methodologies, and managed service delivery frameworks. Conduct supplier cyber risk assessments, vendor due diligence reviews, and third-party security evaluations. • Assess third-party cybersecurity controls against leading frameworks and industry standards. • Conduct cybersecurity due diligence assessments for mergers, acquisitions, carve-outs, divestitures, and private equity transactions, evaluating cyber risk exposures, operational dependencies, and remediation requirements. • Leverage and advise clients on TPRM, GRC, continuous monitoring, and cyber risk platforms including ServiceNow, Archer, OneTrust, ProcessUnity, Panorays, Black Kite, BitSight, Interos.AI, and similar technologies. • Design assessment workflows, questionnaire rationalization approaches, control mappings, evidence collection processes, and automated risk-scoring methodologies. • Support clients in aligning TPRM programs with evolving regulatory requirements and operational resilience expectations. • Develop executive reporting, board-level dashboards, key risk indicators (KRIs), quantitative risk metrics, portfolio-wide benchmarking, and management reporting that translates technical findings into business, operational, financial, and regulatory impacts. • Lead cybersecurity risk assessments, security program reviews, cyber maturity assessments, and gap analyses. • Assess client environments against frameworks including NIST CSF, ISO 27001, CIS Controls, FFIEC, NYDFS, SOC 2, and other applicable standards. • Develop and enhance cyber risk management frameworks, governance models, policies, standards, procedures, and data-driven risk management processes while providing practical guidance for implementation and operationalization. Help clients identify, prioritize, and remediate cyber and technology risks through practical risk reduction roadmaps. • Support security strategy, operating model design, and cyber transformation initiatives. • Lead supplier resilience, concentration-risk, dependency mapping, fourth-party risk, recovery preparedness, and operational resilience assessments, helping organizations align cyber risk management activities with broader business continuity objectives. • Facilitate workshops with business, technology, security, risk, and resilience stakeholders. • Act as day-to-day engagement lead across multiple client projects. • Manage project teams, workplans, budgets, timelines, deliverables, and quality assurance activities. • Develop trusted client relationships and serve as a key point of contact during engagements. • Support development of proposals, statements of work, and client presentations. • Identify opportunities to expand client relationships across Kroll's broader Cyber Risk and Advisory offerings. • Support creation of thought leadership, market-facing content, and industry presentations. • Mentor, coach, and support junior consultants and managers. • Contribute to methodology development, quality assurance, and practice growth initiatives. • Analyze threat intelligence, attack surface monitoring, security ratings, continuous monitoring data, and assessment results to identify emerging risks, prioritize remediation activities, and support executive decision-making. • Assess risks related to artificial intelligence, generative AI, machine learning, and emerging technologies, including governance, data protection, model risk management, and responsible AI practices. • Effectively communicate findings, reports, training and strategies to technical staff, executive leadership, legal counsel, and to both internal and external clients. • Work with sales and marketing teams to support the development of new business opportunities. Qualifications • Experience designing, implementing, optimizing, or administering TPRM, GRC, continuous monitoring, or cyber risk management platforms. • Significant experience in cybersecurity consulting, third-party risk management, technology risk, information security, operational resilience, or related advisory services. • Strong experience designing, assessing, implementing, or managing Third-Party Risk Management programs and managed services. • Experience conducting cyber risk assessments, supplier security reviews, or technology risk assessments. • Working knowledge of cybersecurity frameworks and regulatory requirements including NIST CSF, NIST 800-171, ISO 27001, CIS Controls, PCI DSS, HIPAA Security Rule, SOC 2, FFIEC, NYDFS, SEC Cybersecurity Rules, DORA, NIS2, and related global regulations. • Understanding of supplier cyber risk, cloud risk, concentration risk, vendor governance, and resilience concepts. • Experience presenting findings and recommendations to senior client stakeholders. • Ability to manage multiple engagements simultaneously while maintaining quality and client satisfaction. • Experience leading project teams and mentoring junior staff. • Commercially minded with experience supporting proposals, business development, and account growth activities. • Professional qualifications and/or proven experience in IT/ Information Security, TPRM, GRC / Risk Management, Vulnerability Management, Incident Response, and/or Regulatory Compliance roles. • Demonstrated ability to analyze large datasets, develop risk models, create management reporting dashboards, and derive actionable risk insights using tools such as Excel, Tableau, Power BI, SQL, Python, or comparable analytics platforms. • Good knowledge of the security threat landscape, control frameworks and cyber resilience strategies. • Demonstrated ability to design pragmatic risk management, governance, and resilience solutions leveraging people, process, data, and technology. • Strong written and verbal communication and presentation skills, teamwork, and client relationship skills. • Experience in client-facing roles and experience in engaging with senior stakeholders in organizations (desirable but not mandatory). • Experience in high-quality delivery to tight timescales. • Ability to multi-task, prioritize, and manage time effectively. • Experience working with diverse teams • Ability to travel up to 25% as required Above all, the ideal candidate combines strong cybersecurity knowledge with practical experience managing third-party risk and advising clients on governance, resilience, and risk management challenges. Successful candidates will be comfortable operating between detailed assessment activities and executive-level discussions, helping clients translate cyber risks into prioritized business actions. They will bring a collaborative approach, strong client-facing skills, and a desire to contribute to the continued growth of Kroll's Cyber Advisory practice. Your recruiter will be happy to walk you through your U.S.-specific benefits, which include: • Healthcare Coverage: Comprehensive medical, dental, and vision plans. • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. • Retirement Plans: 401(k) plans with company matching. Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position. About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. In order to be considered for a position, you must formally apply via careers.kroll.com. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. The current salary range for this position is $150,000 to $200,000

Lead and manage cybersecurity advisory engagements focusing on third-party risk management and cyber risk assessments. | Extensive experience in cybersecurity consulting, third-party risk management, and advisory services with strong client-facing and leadership skills. | In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers - in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, data-driven framework design and assessments, expert testimony, privacy program building and a myriad of other advisory efforts. Kroll's Cyber Advisory practice is seeking a Senior Manager to support the continued growth of our Cyber Advisory business, with a primary focus on Third-Party Risk Management (TPRM), cyber risk assessments, governance, resilience, and security program advisory services. The successful candidate will be a trusted advisor to clients, leading TPRM and cyber risk engagements, supporting executive stakeholders, delivering high-quality advisory services, and helping clients strengthen their security posture, resilience, and regulatory readiness. This role combines client delivery, project leadership, people management, service development and business development support within Kroll's broader Cyber Advisory practice. Responsibilities Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. We are looking for bright, inquisitive minds who are experienced in and passionate about cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provide leadership and strategic guidance when and where it is needed the most. • Own delivery and operational performance for managed TPRM programs, including assessment throughput, service level adherence, quality assurance, remediation tracking, client satisfaction, and continuous improvement initiatives. • Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying sectors, size, scope, and complexity. • Lead delivery of cyber-focused Third-Party Risk Management (TPRM) / Managed TPRM engagements across multiple industries and client segments. • Design, assess, and optimize Third-Party Risk Management operating models, governance structures, policies, standards, lifecycle processes, risk-tiering methodologies, and managed service delivery frameworks. Conduct supplier cyber risk assessments, vendor due diligence reviews, and third-party security evaluations. • Assess third-party cybersecurity controls against leading frameworks and industry standards. • Conduct cybersecurity due diligence assessments for mergers, acquisitions, carve-outs, divestitures, and private equity transactions, evaluating cyber risk exposures, operational dependencies, and remediation requirements. • Leverage and advise clients on TPRM, GRC, continuous monitoring, and cyber risk platforms including ServiceNow, Archer, OneTrust, ProcessUnity, Panorays, Black Kite, BitSight, Interos.AI, and similar technologies. • Design assessment workflows, questionnaire rationalization approaches, control mappings, evidence collection processes, and automated risk-scoring methodologies. • Support clients in aligning TPRM programs with evolving regulatory requirements and operational resilience expectations. • Develop executive reporting, board-level dashboards, key risk indicators (KRIs), quantitative risk metrics, portfolio-wide benchmarking, and management reporting that translates technical findings into business, operational, financial, and regulatory impacts. • Lead cybersecurity risk assessments, security program reviews, cyber maturity assessments, and gap analyses. • Assess client environments against frameworks including NIST CSF, ISO 27001, CIS Controls, FFIEC, NYDFS, SOC 2, and other applicable standards. • Develop and enhance cyber risk management frameworks, governance models, policies, standards, procedures, and data-driven risk management processes while providing practical guidance for implementation and operationalization. Help clients identify, prioritize, and remediate cyber and technology risks through practical risk reduction roadmaps. • Support security strategy, operating model design, and cyber transformation initiatives. • Lead supplier resilience, concentration-risk, dependency mapping, fourth-party risk, recovery preparedness, and operational resilience assessments, helping organizations align cyber risk management activities with broader business continuity objectives. • Facilitate workshops with business, technology, security, risk, and resilience stakeholders. • Act as day-to-day engagement lead across multiple client projects. • Manage project teams, workplans, budgets, timelines, deliverables, and quality assurance activities. • Develop trusted client relationships and serve as a key point of contact during engagements. • Support development of proposals, statements of work, and client presentations. • Identify opportunities to expand client relationships across Kroll's broader Cyber Risk and Advisory offerings. • Support creation of thought leadership, market-facing content, and industry presentations. • Mentor, coach, and support junior consultants and managers. • Contribute to methodology development, quality assurance, and practice growth initiatives. • Analyze threat intelligence, attack surface monitoring, security ratings, continuous monitoring data, and assessment results to identify emerging risks, prioritize remediation activities, and support executive decision-making. • Assess risks related to artificial intelligence, generative AI, machine learning, and emerging technologies, including governance, data protection, model risk management, and responsible AI practices. • Effectively communicate findings, reports, training and strategies to technical staff, executive leadership, legal counsel, and to both internal and external clients. • Work with sales and marketing teams to support the development of new business opportunities. Qualifications • Experience designing, implementing, optimizing, or administering TPRM, GRC, continuous monitoring, or cyber risk management platforms. • Significant experience in cybersecurity consulting, third-party risk management, technology risk, information security, operational resilience, or related advisory services. • Strong experience designing, assessing, implementing, or managing Third-Party Risk Management programs and managed services. • Experience conducting cyber risk assessments, supplier security reviews, or technology risk assessments. • Working knowledge of cybersecurity frameworks and regulatory requirements including NIST CSF, NIST 800-171, ISO 27001, CIS Controls, PCI DSS, HIPAA Security Rule, SOC 2, FFIEC, NYDFS, SEC Cybersecurity Rules, DORA, NIS2, and related global regulations. • Understanding of supplier cyber risk, cloud risk, concentration risk, vendor governance, and resilience concepts. • Experience presenting findings and recommendations to senior client stakeholders. • Ability to manage multiple engagements simultaneously while maintaining quality and client satisfaction. • Experience leading project teams and mentoring junior staff. • Commercially minded with experience supporting proposals, business development, and account growth activities. • Professional qualifications and/or proven experience in IT/ Information Security, TPRM, GRC / Risk Management, Vulnerability Management, Incident Response, and/or Regulatory Compliance roles. • Demonstrated ability to analyze large datasets, develop risk models, create management reporting dashboards, and derive actionable risk insights using tools such as Excel, Tableau, Power BI, SQL, Python, or comparable analytics platforms. • Good knowledge of the security threat landscape, control frameworks and cyber resilience strategies. • Demonstrated ability to design pragmatic risk management, governance, and resilience solutions leveraging people, process, data, and technology. • Strong written and verbal communication and presentation skills, teamwork, and client relationship skills. • Experience in client-facing roles and experience in engaging with senior stakeholders in organizations (desirable but not mandatory). • Experience in high-quality delivery to tight timescales. • Ability to multi-task, prioritize, and manage time effectively. • Experience working with diverse teams • Ability to travel up to 25% as required Above all, the ideal candidate combines strong cybersecurity knowledge with practical experience managing third-party risk and advising clients on governance, resilience, and risk management challenges. Successful candidates will be comfortable operating between detailed assessment activities and executive-level discussions, helping clients translate cyber risks into prioritized business actions. They will bring a collaborative approach, strong client-facing skills, and a desire to contribute to the continued growth of Kroll's Cyber Advisory practice. Your recruiter will be happy to walk you through your U.S.-specific benefits, which include: • Healthcare Coverage: Comprehensive medical, dental, and vision plans. • Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. • Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. • Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. • Retirement Plans: 401(k) plans with company matching. Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position. About Kroll Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. In order to be considered for a position, you must formally apply via careers.kroll.com. We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability. The current salary range for this position is $150,000 to $200,000

Lead TPRM and cyber risk engagements, manage project teams and client relationships, and develop risk management frameworks. | Significant experience in cybersecurity consulting, third-party risk management, technology risk advisory, and ability to manage projects and mentor staff. | In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers - in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel.    Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, data-driven framework design and assessments, expert testimony, privacy program building and a myriad of other advisory efforts.   Kroll's Cyber Advisory practice is seeking a Senior Manager to support the continued growth of our Cyber Advisory business, with a primary focus on Third-Party Risk Management (TPRM), cyber risk assessments, governance, resilience, and security program advisory services.   The successful candidate will be a trusted advisor to clients, leading TPRM and cyber risk engagements, supporting executive stakeholders, delivering high-quality advisory services, and helping clients strengthen their security posture, resilience, and regulatory readiness.   This role combines client delivery, project leadership, people management, service development and business development support within Kroll's broader Cyber Advisory practice. RESPONSIBILITIES:   Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience.    We are looking for bright, inquisitive minds who are experienced in and passionate about cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provide leadership and strategic guidance when and where it is needed the most.     * Own delivery and operational performance for managed TPRM programs, including assessment throughput, service level adherence, quality assurance, remediation tracking, client satisfaction, and continuous improvement initiatives. * Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying sectors, size, scope, and complexity. * Lead delivery of cyber-focused Third-Party Risk Management (TPRM) / Managed TPRM engagements across multiple industries and client segments. * Design, assess, and optimize Third-Party Risk Management operating models, governance structures, policies, standards, lifecycle processes, risk-tiering methodologies, and managed service delivery frameworks. Conduct supplier cyber risk assessments, vendor due diligence reviews, and third-party security evaluations. * Assess third-party cybersecurity controls against leading frameworks and industry standards. * Conduct cybersecurity due diligence assessments for mergers, acquisitions, carve-outs, divestitures, and private equity transactions, evaluating cyber risk exposures, operational dependencies, and remediation requirements. * Leverage and advise clients on TPRM, GRC, continuous monitoring, and cyber risk platforms including ServiceNow, Archer, OneTrust, ProcessUnity, Panorays, Black Kite, BitSight, Interos.AI, and similar technologies. * Design assessment workflows, questionnaire rationalization approaches, control mappings, evidence collection processes, and automated risk-scoring methodologies. * Support clients in aligning TPRM programs with evolving regulatory requirements and operational resilience expectations. * Develop executive reporting, board-level dashboards, key risk indicators (KRIs), quantitative risk metrics, portfolio-wide benchmarking, and management reporting that translates technical findings into business, operational, financial, and regulatory impacts. * Lead cybersecurity risk assessments, security program reviews, cyber maturity assessments, and gap analyses. * Assess client environments against frameworks including NIST CSF, ISO 27001, CIS Controls, FFIEC, NYDFS, SOC 2, and other applicable standards. * Develop and enhance cyber risk management frameworks, governance models, policies, standards, procedures, and data-driven risk management processes while providing practical guidance for implementation and operationalization. Help clients identify, prioritize, and remediate cyber and technology risks through practical risk reduction roadmaps. * Support security strategy, operating model design, and cyber transformation initiatives. * Lead supplier resilience, concentration-risk, dependency mapping, fourth-party risk, recovery preparedness, and operational resilience assessments, helping organizations align cyber risk management activities with broader business continuity objectives. * Facilitate workshops with business, technology, security, risk, and resilience stakeholders. * Act as day-to-day engagement lead across multiple client projects. * Manage project teams, workplans, budgets, timelines, deliverables, and quality assurance activities. * Develop trusted client relationships and serve as a key point of contact during engagements. * Support development of proposals, statements of work, and client presentations. * Identify opportunities to expand client relationships across Kroll's broader Cyber Risk and Advisory offerings. * Support creation of thought leadership, market-facing content, and industry presentations. * Mentor, coach, and support junior consultants and managers. * Contribute to methodology development, quality assurance, and practice growth initiatives. * Analyze threat intelligence, attack surface monitoring, security ratings, continuous monitoring data, and assessment results to identify emerging risks, prioritize remediation activities, and support executive decision-making. * Assess risks related to artificial intelligence, generative AI, machine learning, and emerging technologies, including governance, data protection, model risk management, and responsible AI practices. * Effectively communicate findings, reports, training and strategies to technical staff, executive leadership, legal counsel, and to both internal and external clients. * Work with sales and marketing teams to support the development of new business opportunities.   QUALIFICATIONS: * Experience designing, implementing, optimizing, or administering TPRM, GRC, continuous monitoring, or cyber risk management platforms. * Significant experience in cybersecurity consulting, third-party risk management, technology risk, information security, operational resilience, or related advisory services.  * Strong experience designing, assessing, implementing, or managing Third-Party Risk Management programs and managed services.  * Experience conducting cyber risk assessments, supplier security reviews, or technology risk assessments.  * Working knowledge of cybersecurity frameworks and regulatory requirements including NIST CSF, NIST 800-171, ISO 27001, CIS Controls, PCI DSS, HIPAA Security Rule, SOC 2, FFIEC, NYDFS, SEC Cybersecurity Rules, DORA, NIS2, and related global regulations. * Understanding of supplier cyber risk, cloud risk, concentration risk, vendor governance, and resilience concepts.  * Experience presenting findings and recommendations to senior client stakeholders.  * Ability to manage multiple engagements simultaneously while maintaining quality and client satisfaction.  * Experience leading project teams and mentoring junior staff.  * Commercially minded with experience supporting proposals, business development, and account growth activities.  * Professional qualifications and/or proven experience in IT/ Information Security, TPRM, GRC / Risk Management, Vulnerability Management, Incident Response, and/or Regulatory Compliance roles. * Demonstrated ability to analyze large datasets, develop risk models, create management reporting dashboards, and derive actionable risk insights using tools such as Excel, Tableau, Power BI, SQL, Python, or comparable analytics platforms.  * Good knowledge of the security threat landscape, control frameworks and cyber resilience strategies. * Demonstrated ability to design pragmatic risk management, governance, and resilience solutions leveraging people, process, data, and technology. * Strong written and verbal communication and presentation skills, teamwork, and client relationship skills. * Experience in client-facing roles and experience in engaging with senior stakeholders in organizations (desirable but not mandatory). * Experience in high-quality delivery to tight timescales. * Ability to multi-task, prioritize, and manage time effectively. * Experience working with diverse teams * Ability to travel up to 25% as required    Above all, the ideal candidate combines strong cybersecurity knowledge with practical experience managing third-party risk and advising clients on governance, resilience, and risk management challenges. Successful candidates will be comfortable operating between detailed assessment activities and executive-level discussions, helping clients translate cyber risks into prioritized business actions. They will bring a collaborative approach, strong client-facing skills, and a desire to contribute to the continued growth of Kroll's Cyber Advisory practice.   Your recruiter will be happy to walk you through your U.S.-specific benefits, which include:   * Healthcare Coverage: Comprehensive medical, dental, and vision plans. * Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave. * Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection. * Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews. * Retirement Plans: 401(k) plans with company matching.   Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.   About Kroll    Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.    In order to be considered for a position, you must formally apply via careers.kroll.com.   We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.   The current salary range for this position is $150,000 to $200,000     #LI-CN1 #LI-Remote