Associate Director, Cyber Advisory

We now have an exciting opportunity for an experienced Associate Director to join our rapidly growing Digital Risks Protect team in London. This is a unique opportunity that requires a highly motivated and diligent client-facing individual to join a highly successful team. This key role will support the growth of Digital Risks and the Protect Advisory business across EMEA, specifically leading and supporting on cyber security and digital risk management programmes, focused but not limited to IT/OT security, enterprise security, cloud security and GRC.

As Associate Director you will work on a variety of exciting projects, helping to deliver Control Risks’ cyber security risk assessment engagements primarily across the EMEA region and act as a subject matter expert on cyber security risk assessments. You will need to demonstrate experience and expertise in the delivery of cyber security risk assessments and maturity and effectiveness in working with senior client stakeholders.

You should be a team‑player who is passionate about delivering high quality cyber security advice to some of the world’s largest organizations. You will have a good level of experience in a cyber security assurance and/or security advisory role and will need to demonstrate a deep understanding of the cyber security challenges facing our clients. You will have an established track‑record of delivering cyber security risk assessment projects to a diverse range of clients.

Located in London, you will be able to travel up to 50% of working time, with the occasional need to travel over weekends. Travel will primarily be in Europe but may include travel to Africa and further afield. We operate a hybrid working model which requires attendance at our London office at least three days per week.

• Delivering projects (e.g., conducting asset identification exercises, cyber risk assessments against ISO and NIST CSF 2.0 standards, and demonstrating cyber audit expertise).
• Managing different types of client meetings and maintaining positive and respectful client relationships.
• Line management and upskilling of junior resources within the Digital Risks, Protect team.
• Strategic delivery acting as virtual‑CISO for our clients on an ongoing basis.
• Project management of multiple cyber risk advisory engagements (e.g. running kick‑off meetings, refining outputs, developing recommendations).
• Working with key project stakeholders (e.g., gathering information from interviews, document reviews and presenting findings) while maintaining the confidence of the client through clear communication and good project management
• Provide flexible and responsive support as and when crisis management support is required and can be provided.

• Owning end‑to‑end development and management of proposals for future client work.
• Project scoping and planning, to support pricing.
• Maintain up‑to‑date presale documents.
• Contributing to and building complex, multi‑service line proposals.
• Cultivating long‑term relationships with clients.
• Participating in marketing to build the Control Risks' brand.

• Solid experience in cyber security and related disciplines, particularly in technology and infrastructure consulting projects
• Experience in delivering large, converged programmes of work in EMEA including cyber security risk assessments within an established global consultancy.
• Proven experience in delivering risk assessments for several different clients against industry standards (NIST CSF, 800-53 and ISO
  27001).
• An excellent knowledge of IT and network infrastructure, alongside cyber security best practices for securing networks.
• Subject matter expertise, including extensive and demonstrable fluency in technology risk issues.
• Proven experience of operating in senior security and resilience roles, including knowledge of IT and OT network infrastructure.
• The ability to explain difficult technical concepts and ideas in non‑technical terms to senior executives.

• Strong understanding of operational technology cyber security best practices
• A working familiarity on…