Director, Cyber security & Privacy Practice, Proactive Services

Ankura is a team of excellence founded on innovation and growth.

This position supports the Data & Technology practice - one of six practices focused on client delivery services across the Firm.

Our global team of over 100 professionals includes former federal law enforcement personnel, in-house security experts, Big 4 consultants, federal regulators, threat intel and dark web experts, etc. We have helped clients and partners for 10+ years across industries and geographies with the following services:

• Incident Response, Intelligence, and Investigations.
• Technology, Privacy, and Cyber Risk Advisory.
• End Point & Managed Detection & Response.

The EMEA Cyber security & Privacy practice is growing and has ambitions to expand its capabilities from a strong base in incident response, intelligence and investigations into additional proactive security, AI security and managed detection & response services.

• You will have the opportunity to get involved with both Proactive and Reactive work
• We can support and develop individuals who aspire to be an expert
• Opportunities for career development, an assigned career mentor, access to Ankura Academy, and opportunities to collaborate on projects with other Ankura practices
• Work with a collaborative environment, whereby our professionals have the freedom to innovate which promotes curiosity, learning and communication.

The Director role is Manager level position. Ankura's Cyber security and Privacy Practice is a full-service suite of cyber security and privacy solutions, regardless of industry or size.

• Cyber Security Program & Strategy: Evaluate and enhance client cyber security programmes against recognised frameworks like NIST, ISO, DORA, and NIS
  2. Advise on security strategy for cloud and hybrid environments, acting as a vCISO to guide their cyber resilience and security posture. This is a core part of our advisory services.
• Risk Management & Remediation: Conduct comprehensive cyber risk assessments, including third-party risk management and cyber risk quantification. Develop and oversee remediation plans, from initial assessment to full delivery, ensuring a seamless consulting engagement.
• Policy & Incident Response: Develop and refine security policies, including Business Continuity Plans (BCPs) and incident response plans. Support the delivery of cyber security and crisis tabletop exercises to test client resilience.