Join our dynamic Cyber Strategy & Transformation team as a Deputy Manager in Third-Party Risk Management. You will be instrumental in building strong client relationships and exceeding expectations by leading critical cybersecurity advisory engagements. This role offers a unique opportunity to shape and enhance cyber risk management strategies for diverse clients.

As a key member of our team, you'll independently spearhead initiatives across Cyber Security Advisory, GRC, Cyber Risk Management, Technology Risk, and TPRM. Your expertise will be vital in conducting comprehensive risk assessments, developing robust frameworks, and implementing effective governance models. We encourage you to foster a collaborative environment and drive impactful outcomes in the ever-evolving cybersecurity landscape.

Lead cybersecurity risk and maturity assessments across various environments including IT, OT, Cloud, and IoT. Develop and refine Cyber Risk Management Frameworks (CRMF) and TPRM frameworks, covering the entire third-party lifecycle. Define and implement advanced risk tiering, quantification, and reporting mechanisms. Spearhead ISO/IEC 27001 implementations and conduct control assessments against leading industry standards. Interpret and apply regulatory requirements to develop practical remediation plans. Facilitate client workshops and executive presentations, manage engagement workstreams, and mentor consulting teams. Support business development activities and collaborate with cross-functional stakeholders to achieve strategic cybersecurity goals.

A minimum of 6 to 9 years of relevant experience in Cyber Security Advisory, GRC, Cyber Risk Management, Technology Risk, IT Audit, or Cybersecurity Consulting is essential. Prior experience with Big 4 firms, management consulting, or specialized cybersecurity consulting is highly preferred. A strong understanding of ISO/IEC 27001, NIST Cybersecurity Framework (CSF), and core risk management principles is required. Proven ability to manage client workstreams, lead engagement teams, and communicate effectively with senior stakeholders is crucial. Excellent analytical, problem-solving, and presentation skills are necessary. Professional certifications like CISSP, CISM, CISA, or CRISC are advantageous. Experience with AI Governance or AI Security certifications will be a significant plus.