Senior Associate/Cybersecurity Consultant Due Diligence Advisory (Forensic Services practice)

The role

You will lead and participate in client-facing cybersecurity assessments, including interviews, workshops, and executive readouts. You will translate client discussions into engagement scopes and Statements of Work while evaluating cybersecurity posture in transaction and investment contexts.

What you will do

• Lead and participate in client-facing assessments, interviews, workshops, and executive readouts
• Translate client discussions into engagement scopes and Statements of Work
• Assess cybersecurity posture in transaction and investment contexts
• Execute cyber due diligence and proactive security assessments
• Support incident readiness reviews, tabletop exercises, and cyber resilience assessments
• Work with the incident response team to identify recurring risk themes and control gaps
• Produce high-quality, client-ready reports with prioritized findings and risk-based recommendations
• Support senior team members in proposal and business development efforts
• Develop repeatable assessment methodologies, templates, and client-facing deliverables

Required qualifications

• Approximately 5–7 years of experience in cybersecurity consulting, advisory, or due diligence
• Comfortable leading discussions with CIOs, IT Directors, and legal stakeholders
• Strong ability to guide conversations, ask structured questions, and manage meetings effectively
• Excellent executive communication skills
• Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals
• Ability to tailor scopes and findings to transaction, diligence, or investment-focused objectives
• Impeccable written communication skills
• Ability to produce logically consistent, defensible findings and recommendations
• Strong working knowledge of NIST Cybersecurity Framework
• Strong working knowledge of supporting frameworks such as CIS Benchmarks, ISO 27001, SOC 2 Type II, HIPAA, and HITRUST
• Broad understanding of core cybersecurity domains including Identity & Access Management, Endpoint security, Vulnerability management, Backup and recovery, Email security, and Asset inventory
• Strong organizational and time management skills

Nice to have

• Experience supporting cyber resilience assessments, incident readiness reviews, or tabletop exercises
• Experience collaborating with incident response, forensic, or crisis management teams
• Exposure to tools such as CrowdStrike, Tanium, Microsoft 365, Azure/Entra ID, and AWS
• Certifications such as CISSP, CISM, CISA, PMP, or similar

Benefits

• 100 hours of training annually through formal and informal programs
• Career mentoring and performance coaching
• Superior benefits package
• Wellness programming for physical, mental, emotional and financial well-being
• In-house immigration support for foreign nationals and international business travelers
• Medical, dental, and vision insurance
• 401(k) retirement plan with employer match
• Life and disability insurance
• Paid time off (vacation, sick leave, holidays)
• Paid parental leave
• Employee assistance resources
• Commuter benefits

Before you apply

• For US or Canada positions, include resume with current address, personal email and telephone number
• For US or Canada positions, include a cover letter describing interest in CRA and role match

About the company

Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations and governments around the world.