This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Cyber & Technology Risk Consultant in the United States.
This role sits at the intersection of cybersecurity, technology risk, and enterprise governance within a large-scale digital environment. You will be responsible for assessing the design and effectiveness of cyber and IT controls across applications, infrastructure, and digital products. Working closely with engineering, product, and security teams, you will help ensure that risk frameworks are robust, scalable, and aligned with industry standards. The role combines hands-on control testing with opportunities to improve processes through automation and AI-driven approaches. You will contribute to strengthening enterprise-wide risk visibility and support leadership in making informed, risk-based decisions. This is a high-impact position for a proactive professional who thrives in complex, fast-moving environments and enjoys improving how risk is managed at scale.
Accountabilities:
- Execute cybersecurity and technology control assessments, ensuring alignment with frameworks such as NIST CSF, NIST 800-53, and COBIT.
- Perform design and operating effectiveness testing of IT and cyber controls across systems, applications, and infrastructure.
- Gather and evaluate evidence from engineering, product, and security teams to validate control performance.
- Identify control gaps, weaknesses, and opportunities for improvement in processes and governance structures.
- Support the enhancement of testing methodologies, documentation standards, and control procedures.
- Contribute to risk reporting and provide clear insights for senior leadership and stakeholders.
- Explore and implement automation and AI-driven solutions to improve testing efficiency and continuous monitoring.
- Support cyber resilience activities, including incident response readiness, disaster recovery, and threat preparedness.
Requirements
- 3+ years of experience in IT risk management, cybersecurity, technology controls, or audit functions.
- Strong understanding of cybersecurity frameworks such as NIST CSF and related control standards.
- Hands-on experience in control testing, including design effectiveness and operating effectiveness assessments.
- Ability to analyze complex processes, identify risks, and translate findings into actionable recommendations.
- Strong communication skills with the ability to collaborate across technical and non-technical teams.
- Experience in risk reporting, control documentation, and stakeholder engagement.
- Bachelor’s degree in cybersecurity, information systems, computer science, or a related field preferred.
- Certifications such as CISSP, CISA, or CRISC are a strong plus.
- Familiarity with automation, scripting, or AI tools applied to risk and control environments is highly desirable.
Benefits
- Competitive annual salary range: $70,100 – $121,475 based on experience and qualifications
- Health insurance coverage including medical, dental, and vision plans
- Retirement savings plan with employer support options
- Life, disability, and additional insurance coverage
- Paid time off, holidays, and flexible leave programs
- Employee wellness programs and mental health support resources
- Opportunities for professional development and certifications
- Inclusive, innovation-driven work environment with enterprise-scale impact.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1