# Senior Associate/Cybersecurity Consultant Due Diligence Advisory (Forensic Services practice)

**Company**: Charles River Associates
**Location**: Toronto, ON
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: CAD$140,000 – $190,000
**Category**: Security
**Industry**: Consulting

**Apply**: https://job-boards.greenhouse.io/charlesriverassociates/jobs/8110025?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_afc7724d-a1e

## Description

Charles River Associates (CRA) is seeking a Cybersecurity Consultant to support client engagements focused on evaluating and managing cybersecurity risk. In this role, you will lead and participate in client-facing assessments, including interviews, workshops, and executive readouts.

Responsibilities:

- Lead and participate in client-facing assessments, including interviews, workshops, and executive readouts

- Translate client discussions into clearly defined engagement scopes and Statements of Work (SOWs)

- Assess cybersecurity posture in transaction and investment contexts

- Distinguish material risks from broader program maturity gaps

- Tailor findings to the needs of private equity, legal, and executive stakeholders

- Execute cyber due diligence and proactive security assessments

- Support incident readiness reviews, tabletop exercises, and broader cyber resilience assessments

- Produce high-quality, client-ready reports

- Support senior team members in proposal development and business development efforts

Requirements:

- Approximately 5–7 years of experience in cybersecurity consulting, advisory, or due diligence

- Experience supporting cyber resilience assessments, incident readiness reviews, tabletop exercises, or related preparedness-focused engagements is a plus

- Comfortable leading discussions with CIOs, IT Directors, and legal stakeholders

- Strong ability to guide conversations, ask structured questions, and manage meetings effectively

- Excellent executive communication skills

- Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals

- Ability to translate loosely defined client needs into structured deliverables and timelines

- Strong commercial awareness

- Impeccable written communication skills

- Ability to produce logically consistent, defensible findings and recommendations

- Experience delivering polished, client-ready cybersecurity risk reports

Technical Skills:

- NIST Cybersecurity Framework (primary)

- Supporting frameworks such as CIS Benchmarks, ISO 27001, SOC 2 Type II, HIPAA, and HITRUST

- Identity & Access Management (e.g., Active Directory, Entra ID)

- Endpoint security (e.g., EDR/MDR solutions such as CrowdStrike)

- Vulnerability management tools (e.g., Tenable, Qualys)

- Backup and recovery strategies (RTO/RPO, immutability)

- Email security (phishing protection, DMARC, MFA)

- Asset inventory, device management, and patch lifecycle practices

Benefits:

- CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually

- Comprehensive total rewards program

- Superior benefits package

- Wellness programming

- In-house immigration support for foreign nationals and international business travelers

## Skills

### Required
- NIST Cybersecurity Framework
- Identity & Access Management
- Endpoint security
- Vulnerability management
- Backup and recovery strategies
- Email security
- Asset inventory
- device management
- patch lifecycle practices

### Nice to have
- CISSP
- CISM
- CISA
- PMP
- CrowdStrike
- Tanium
- Microsoft 365
- Azure/Entra ID
- AWS

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/charlesriverassociates/jobs/8110025?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)