CYBER STRATEGY & RISK ADVISORY CONSULTANT

Part-time,Full-time - Mid Level

Boston, MA

5,001-10,000 employees

Professional, Scientific, and Technical Services

About the position

The Cyber Strategy & Risk Advisory Consultant position at Booz Allen is designed for professionals who are eager to tackle the evolving challenges in the cybersecurity landscape. As organizations face increasing pressure to enhance their cybersecurity posture due to dynamic threats, technological advancements, and regulatory changes, this role is pivotal in guiding clients through these complexities. The consultant will be part of Booz Allen's Cyber Risk practice, which focuses on aligning cybersecurity and risk management functions with business objectives to drive strategic decisions and optimize investments in cybersecurity. This involves not only assessing and improving clients' cybersecurity frameworks but also ensuring that these enhancements yield a material return on investment (ROSI). In this role, you will serve as a strategic risk advisor, leveraging next-generation techniques and tools to help clients transform their cybersecurity strategies. You will work closely with a network of professionals to provide high-quality service, build strong client relationships, and deliver results to senior stakeholders. Your responsibilities will include executing cybersecurity assessments against industry frameworks, identifying vulnerabilities, and recommending risk-aligned remediations that enhance clients' cyber resilience. Additionally, you will be responsible for authoring technical reports and presentations that communicate findings and recommendations effectively to diverse audiences. Booz Allen is committed to fostering a culture of respect, equity, and opportunity, allowing you to bring your whole self to work. The company offers a variety of professional development opportunities, including upskilling programs and tuition reimbursement, to help you grow your career. With a comprehensive benefits package that includes wellness programs, paid parental leave, and a generous 401(k) match, Booz Allen supports your well-being and work-life balance. Join Booz Allen and become a catalyst for change in cybersecurity, driving client service excellence and innovation across various industries, including automotive, healthcare, financial services, and more.

Responsibilities

• Support enterprise consulting engagements with Fortune 500 and Global 1000 clients.
• Deliver results to senior stakeholders, including industry best practices and standards across cybersecurity and risk management disciplines.
• Execute cybersecurity assessments against industry frameworks such as NIST CSF, NIST 800-53, and ISO 27001.
• Identify root cause issues and recommend risk-aligned remediations to uplift clients' cyber resilience.
• Author technical reports, presentations, and briefs based on cybersecurity or risk assessments.
• Communicate findings and recommendations effectively to diverse audiences.
• Identify technology vulnerabilities using both manual and automated processes.
• Analyze complex security issues and develop effective mitigations.
• Frame results to strategic audiences through effective storytelling.

Requirements

• 3 years of experience supporting enterprise consulting engagements with Fortune 500 and Global 1000 clients.
• 2 years of experience in a consulting role or in a client/customer service delivery role.
• Experience executing cybersecurity assessments against industry frameworks such as NIST CSF, NIST 800-53, and ISO 27001.
• Experience authoring technical reports, presentations, and briefs based on cybersecurity assessments.
• Knowledge of technology and cybersecurity domains such as identify, protect, detect, respond, and recover.
• Experience with security GRC practices, including risk management frameworks and regulatory requirements.
• Ability to work in a team-oriented environment and drive collaboration and productivity.
• Ability to analyze complex security issues and develop effective mitigations.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or Engineering.

Nice-to-haves

• Experience working for a Technology or Management Consulting Firm.
• Experience with application security and testing, including secure coding practices.
• Knowledge of security standards such as Center for Internet Security (CIS) and DoD Security Technical Implementation Guide (STIG).
• Knowledge of cybersecurity functions such as asset management, identity and access management, and incident response.
• Knowledge of emerging trends and technologies in threat modeling such as ATT&CK, PASTA, or STRIDE.

Benefits

• Wellness programs with HSA contributions.
• Paid holidays.
• Paid parental leave.
• Generous 401(k) match.
• Flexible schedules and remote/hybrid work options.
• Tuition reimbursement.
• Professional development opportunities.