Senior Associate/Cybersecurity Consultant Due Diligence Advisory (Forensic Services practice)

The role

You will lead and participate in client-facing cybersecurity assessments, interviews, and workshops. You will translate client discussions into engagement scopes and produce high-quality risk reports for executive stakeholders.

What you will do

• Lead and participate in client-facing assessments, interviews, workshops, and executive readouts
• Translate client discussions into engagement scopes and Statements of Work
• Assess cybersecurity posture in transaction and investment contexts
• Execute cyber due diligence and proactive security assessments
• Support incident readiness reviews, tabletop exercises, and cyber resilience assessments
• Work with the incident response team to identify recurring risk themes
• Produce high-quality, client-ready reports with prioritized findings and risk-based recommendations
• Support senior team members in proposal and business development efforts
• Develop repeatable assessment methodologies, templates, and client-facing deliverables

Required qualifications

• Approximately 5–7 years of experience in cybersecurity consulting, advisory, or due diligence
• Comfortable leading discussions with CIOs, IT Directors, and legal stakeholders
• Strong ability to guide conversations, ask structured questions, and manage meetings
• Excellent executive communication skills
• Experience drafting or contributing to Statements of Work (SOWs), engagement letters, and proposals
• Ability to tailor scopes and findings to transaction, diligence, or investment-focused objectives
• Impeccable written communication skills
• Ability to produce logically consistent, defensible findings and recommendations
• Experience delivering polished, client-ready cybersecurity risk reports
• Knowledge of NIST Cybersecurity Framework
• Knowledge of supporting frameworks such as CIS Benchmarks, ISO 27001, SOC 2 Type II, HIPAA, and HITRUST
• Strong organizational and time management skills

Nice to have

• Experience supporting cyber resilience assessments, incident readiness reviews, or tabletop exercises
• Experience collaborating with incident response, forensic, or crisis management teams
• Exposure to tools such as CrowdStrike, Tanium, Microsoft 365, Azure/Entra ID, and AWS
• Certifications such as CISSP, CISM, CISA, PMP, or similar

Benefits

• 100 hours of training annually
• Career mentoring and performance coaching
• Superior benefits package
• Wellness programming
• In-house immigration support for foreign nationals and international business travelers
• Extended medical, dental, and vision insurance
• ERP with employer contribution
• TFSP
• RESP
• Life and disability insurance
• Paid time off (vacation, sick leave, holidays)
• Paid parental leave

Before you apply

• For positions in Canada, include current address, personal email and telephone number in your resume

About the company

Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations and governments around the world.