Senior Associate/Cybersecurity Consultant Due Diligence Advisory (Forensic Services practice)

Charles River Associates (CRA) is seeking a Cybersecurity Consultant to support client engagements focused on evaluating and managing cybersecurity risk. In this role, you will lead and participate in client-facing assessments, including interviews, workshops, and executive readouts.

Responsibilities:

• Lead and participate in client-facing assessments, including interviews, workshops, and executive readouts
• Translate client discussions into clearly defined engagement scopes and Statements of Work (SOWs)
• Assess cybersecurity posture in transaction and investment contexts
• Distinguish material risks from broader program maturity gaps
• Tailor findings to the needs of private equity, legal, and executive stakeholders
• Execute cyber due diligence and proactive security assessments
• Support incident readiness reviews, tabletop exercises, and broader cyber resilience assessments
• Produce high-quality, client-ready reports
• Support senior team members in proposal development and business development efforts

Requirements:

• Approximately 5–7 years of experience in cybersecurity consulting, advisory, or due diligence
• Experience supporting cyber resilience assessments, incident readiness reviews, tabletop exercises, or related preparedness-focused engagements is a plus
• Comfortable leading discussions with CIOs, IT Directors, and legal stakeholders
• Strong ability to guide conversations, ask structured questions, and manage meetings effectively
• Excellent executive communication skills
• Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals
• Ability to translate loosely defined client needs into structured deliverables and timelines
• Strong commercial awareness
• Impeccable written communication skills
• Ability to produce logically consistent, defensible findings and recommendations
• Experience delivering polished, client-ready cybersecurity risk reports

Technical Skills:

• NIST Cybersecurity Framework (primary)
• Supporting frameworks such as CIS Benchmarks, ISO 27001, SOC 2 Type II, HIPAA, and HITRUST
• Identity & Access Management (e.g., Active Directory, Entra ID)
• Endpoint security (e.g., EDR/MDR solutions such as CrowdStrike)
• Vulnerability management tools (e.g., Tenable, Qualys)
• Backup and recovery strategies (RTO/RPO, immutability)
• Email security (phishing protection, DMARC, MFA)
• Asset inventory, device management, and patch lifecycle practices

Benefits:

• CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually
• Comprehensive total rewards program
• Superior benefits package
• Wellness programming
• In-house immigration support for foreign nationals and international business travelers