Sr. Consultant - Strategy & Risk | Remote

This position will be fully remote and can be hired anywhere in the continental U.S.Optiv’s consultants are skilled technical and consultative resources expected to be strong in both technical and soft skills. The Sr. Consultant – Strategy & Risk, plays a key role in delivering security solutions, conducting risk and compliance assessments and supports client engagements. This position requires a balance of technical skills, strong risk management knowledge, and client facing consulting experience to help organizations improve their security posture and achieve compliance.

How you’ll make an impact

Support clients in assessing risks associated with artificial intelligence, including generative AI and third-party AI solutions, and develop actionable governance and risk mitigation recommendations.

Assist clients in developing AI governance policies, acceptable-use standards, oversight processes, and controls aligned with their business objectives and risk management programs.

Help clients strengthen governance, risk, and compliance (GRC) processes, including risk registers, control mapping, evidence collection, issue management, and remediation tracking.

Lead strategic cybersecurity advisory engagements to assess current-state capabilities, define target-state operating models, and develop multi-year cybersecurity and GRC strategies, transformation roadmaps, and prioritized investment plans aligned with business risk and frameworks such as NIST CSF, NIST 800-53, and ISO 27001

Advise clients on the design, development, and maturity of enterprise cybersecurity and GRC programs, including governance structures, risk frameworks, control environments, policies and standards, metrics, executive reporting, and program operating models.

Design and mature insider risk programs by establishing governance, risk scenarios, monitoring and response processes, and cross-functional operating models that integrate cybersecurity, identity, data protection, HR, Legal, Privacy, and Compliance stakeholders.

Assess and develop cyber asset intelligence and attack surface management programs that improve visibility into enterprise technology assets, ownership, criticality, vulnerabilities, exposures, and risk across traditional IT, cloud, SaaS, and other technology environments.

Develop executive-level cybersecurity strategies and business cases that translate cyber risk, control gaps, regulatory requirements, and emerging threats into prioritized initiatives, measurable outcomes, investment decisions, and actionable transformation roadmaps.

Comfortable delivering independent work or takes the engagement lead for complex projects

Acts as engagement escalation point to assist other delivery team consultants

Work closely with clients to define, build and implement security leading practices

Conduct risk assessments, security readiness audits, gap analysis with compliance and regulatory frameworks

Assess compliance with industry standards and regulatory frameworks, such as, NIST 800-171/53, ISO 27001, COSO, CMMC, HIPAA, PCI, or some combination of these

Assist clients in developing risk management frameworks and mitigation strategies

Provide third-party risk assessments to evaluate client’s supply chain, key vendors

Support the design and implementation of cybersecurity policies, procedures, and governance frameworks

Develop and refine security strategy assessments, security program plans, and POA&MTranslate security operational and technical risks into business implications with recommendations for stakeholders

Conduct workshops, stakeholder interviews, security awareness sessions and presentations with key client stakeholders

Collaborate with Principal Consultants and Technical Managers to support client objectives

Maintain…