Description
Charles River Associates is seeking a Cybersecurity Consultant to support client engagements focused on evaluating and managing cybersecurity risk. In this role, you will lead and participate in client-facing assessments, including interviews, workshops, and executive readouts. You will be responsible for translating client discussions into clearly defined engagement scopes and Statements of Work (SOWs), aligning deliverables with frameworks such as the NIST CSF and transaction-specific objectives.
The role includes executing cyber due diligence and proactive security assessments through documentation review, stakeholder interviews, and control evaluation. You will also support incident readiness reviews, tabletop exercises, and broader cyber resilience assessments to help clients evaluate preparedness, decision-making, and recovery capabilities before or after a cyber event.
The ideal candidate demonstrates a strong advisory mindset, the ability to independently manage client conversations, and the capability to connect multiple cybersecurity domains into a cohesive and defensible security program assessment. The ideal candidate should also be able to translate technical observations into clear business, legal, and transaction-oriented risk narratives for executive and client stakeholders.
Desired Qualifications:
- Experience: Approximately 5–7 years of experience in cybersecurity consulting, advisory, or due diligence
- Client Presence & Communication: Comfortable leading discussions with CIOs, IT Directors, and legal stakeholders
- Scoping & Advisory Skills: Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals
- Report Writing: Impeccable written communication skills, including grammar, structure, and formatting
- Cybersecurity Frameworks: Strong working knowledge of NIST Cybersecurity Framework (primary) and supporting frameworks
- Technical & Domain Knowledge: Broad understanding of core cybersecurity domains, including Identity & Access Management, Endpoint security, Vulnerability management tools, Backup and recovery strategies, Email security, and Asset inventory, device management, and patch lifecycle practices
Career Growth and Benefits:
- CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually
- Comprehensive total rewards program, including a superior benefits package, wellness programming, and in-house immigration support
Work Location Flexibility:
- CRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship and inclusivity.
- Individuals are expected to spend at least 3 to 4 days a week working in the office.