Director, Cyber Strategy and Risk Advisory, vCISO

Director, Cyber Strategy and Risk Advisory, vCISO

Cybersecurity

Cybersecurity | New York, NY, United States |

Share This

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll , you’ll contribute to a supportive and collaborative work environment that empowers you to excel.

Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and high-profile matters in the world. With experts based globally and supported by advanced technology, we help protect our clients’ data, people, operations, and reputation through assessments, investigations, intelligence, and strategic advisory services.

Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies and security program design, transactional due-diligence, framework assessments, expert testimony, privacy program building and a myriad of other advisory efforts.

We are seeking a Director to help lead and grow Kroll's US Virtual CISO and Cyber Advisory practice. This individual will serve as a strategic security leader for a portfolio of clients, acting as a trusted advisor to executive leadership teams, boards, and security stakeholders.

The successful candidate will be responsible for delivering and scaling Virtual CISO services, helping organizations strengthen governance, mature security programs, manage cyber risk, improve resilience, and align cybersecurity investments with business objectives. The role combines executive advisory, program leadership, client relationship management, team leadership, and business development

Responsibilities:

As a Director, you will:

Serve as the designated Virtual / fractional CISO for a portfolio of clients across multiple industries.

Act as a trusted advisor to boards, executive leadership teams, CISOs, CIOs, and risk leaders on cybersecurity strategy, governance, risk, resilience, and regulatory obligations.

Provide ongoing cyber leadership and strategic guidance to clients lacking full-time CISO capabilities or requiring additional executive-level support.

Develop and present cybersecurity roadmaps aligned to business objectives, risk appetite, regulatory requirements, and technology strategy.

Deliver board and executive reporting on cyber risk posture, emerging threats, key initiatives, investment priorities, and program maturity.

Lead security strategy development, governance transformation, risk management enhancements, cyber maturity assessments, and security operating model design.

Advise clients on security organization structure, target operating models, staffing strategies, and capability development.

Guide security investment planning, prioritization and budget justification activities.

Support clients in developing and improving security policies, standards, governance frameworks and performance metrics.

Lead advisory engagements relating to cyber resilience, third-party risk management, regulatory readiness, incident preparedness, security governance and operational resilience.

Support executive management teams in cyber crisis preparation, tabletop exercises, incident response readiness, and recovery planning.

Advise on AI…