ZipRecruiter

Log In

1

Cyber Risk Assessment Jobs in New York (NOW HIRING)

Kroll

Managing Director, Cyber Risk

New York, NY · On-site

... cyber risk, identify value creation opportunities, support transactions, and build resilient ... Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of ...

Qualys

Lead Cyber Risk Solutions Advisor

Manhattan, NY · On-site

$155K - $175K/yr

As a Lead Cyber Risk Advisor , you will be a vital member of the Qualys Cyber Risk Experts Service , supporting enterprise customers with risk analysis, vulnerability assessment, and remediation ...

CLEAR - Corporate

Cybersecurity Risk Analyst II

New York, NY · On-site

$119K - $140K/yr

  • Medical

  • Retirement

Reduced cyber risk assessment cycle times and expanded program coverage through process improvements * Increased visibility into enterprise cyber risk across Security, Engineering, Product, Legal ...

Alpaca

Cyber & AI Risk Analyst

New York, NY

Conduct cyber risk assessments across cloud infrastructure , APIs, trading systems, and internal platforms * Assist in identifying, documenting, and evaluating AI-related risks (model risk, data ...

Deloitte

Cyber Insider Risk Manager

New York, NY · On-site

Cyber Defense & Resilience - Insider Risk Manager Are you interested in working in a dynamic ... Developing comprehensive strategies for insider risk programs, including program assessments and ...

Deloitte

Cyber Insider Risk Manager

Jersey City, NJ

Cyber Defense & Resilience - Insider Risk Manager Are you interested in working in a dynamic ... Developing comprehensive strategies for insider risk programs, including program assessments and ...

Gartner

Lead Security Analyst (DLP/DSPM)

Stamford, CT

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

We'relooking for a well-rounded and motivatedLead Security Analystto join our Human Cyber Risk & Assessment Team. In this critical role,you'llbe instrumental in safeguarding our organization from ...

previous pagenext page

Showing results 21-40

All JobsCyber Risk Assessment JobsCyber Risk Assessment Jobs in New York

Cyber Risk Assessment information

What is a cyber risk assessment?

A cyber risk assessment is a process used to identify, evaluate, and prioritize potential threats and vulnerabilities in an organization's information systems. It helps organizations understand the potential impact of cyber threats and determine the likelihood of such events occurring. By conducting a cyber risk assessment, businesses can implement appropriate security controls and strategies to mitigate risks, comply with regulatory requirements, and protect sensitive data from cyberattacks. Regular assessments are essential to adapt to evolving threats and maintain a strong cybersecurity posture.

What are the key skills and qualifications needed to thrive as a cyber risk assessor?

To thrive as a Cyber Risk Assessor, you need a strong understanding of cybersecurity principles, risk management frameworks, and relevant regulations, often backed by a degree in information security or related certifications like CISSP or CISA. Familiarity with security assessment tools, vulnerability scanners, and risk analysis platforms is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for accurately identifying threats and conveying risks to stakeholders. These skills and qualities are crucial for protecting organizational assets and ensuring compliance in an evolving threat landscape.

What are some common challenges faced by professionals in cyber risk assessment, and how can they be addressed?

Professionals in Cyber Risk Assessment often encounter challenges such as rapidly evolving threat landscapes, keeping up with regulatory changes, and ensuring clear communication of technical risks to non-technical stakeholders. To address these, staying current with industry trends through continuous learning, leveraging robust risk assessment frameworks, and developing strong communication skills are essential. Additionally, collaborating closely with IT, compliance, and business units helps ensure comprehensive and effective risk management.

What is the difference between Cyber Risk Assessment vs Cyber Security Analyst?

AspectCyber Risk AssessmentCyber Security Analyst
Primary FocusIdentifying and evaluating cybersecurity risks and vulnerabilitiesMonitoring, detecting, and responding to security threats
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CEH, CISSP
Work EnvironmentRisk management teams, consulting firms, security departmentsSecurity operations centers, IT departments, incident response teams
ResponsibilitiesRisk analysis, vulnerability assessments, complianceThreat detection, incident response, security monitoring

While both roles involve cybersecurity, Cyber Risk Assessments focus on evaluating potential risks and vulnerabilities to inform security strategies, whereas Cyber Security Analysts actively monitor and respond to ongoing security threats. Understanding these differences helps organizations assign the right roles for comprehensive cybersecurity management.

What are popular job titles related to Cyber Risk Assessment jobs in New York?

For Cyber Risk Assessment jobs in New York, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Assessment jobs in New York look for?

The top searched job categories for Cyber Risk Assessment jobs in New York are:

What cities in New York are hiring for Cyber Risk Assessment jobs?

Cities in New York with the most Cyber Risk Assessment job openings:

Cyber Risk Assessment jobs near you
Infographic showing various Cyber Risk Assessment job openings in New York as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 11% Part Time, 1% Temporary, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution.

Managing Director, Cyber Risk

Kroll

New York, NY • On-site

Full-time

Posted 5 days ago

Kroll rating

7.4

Company rating: 7.4 out of 10

Based on 7 frontline employees who took The Breakroom Quiz

Job description


We are seeking a Managing Director to lead and expand our Cybersecurity Advisory practice serving the Private Equity (PE) sector. This executive will be responsible for driving growth, developing trusted relationships with PE sponsors and portfolio company executives, and delivering strategic cybersecurity advisory services that enhance investment outcomes and enterprise value.
The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities.
The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue.
Key Responsibilities
Business Development & Client Leadership
  • Develop and execute the firm's Private Equity Cybersecurity Advisory growth strategy.
  • Build and maintain C-suite and executive-level relationships with private equity sponsors, operating partners, investment professionals, and portfolio company leadership teams.
  • Originate, qualify, and close new advisory engagements across the PE lifecycle.
  • Serve as the executive sponsor for strategic client relationships and key accounts.
  • Achieve individual and practice revenue, profitability, and growth objectives.
  • Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services.

Transaction Advisory
  • Lead cybersecurity diligence engagements for buy-side and sell-side transactions.
  • Advise investors on cyber risks that may impact valuation, deal structure, integration strategy, or post-close investments.
  • Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of prospective acquisition targets.
  • Deliver actionable recommendations that enable informed investment decisions and accelerated value creation.

Portfolio Value Creation
  • Partner with PE sponsors and portfolio company executives to develop cyber transformation and risk reduction roadmaps.
  • Design and oversee cybersecurity improvement programs that support growth, scalability, and exit readiness.
  • Guide executives in strengthening cyber governance, third-party risk management, incident response, cloud security, identity management, and regulatory compliance.
  • Advise boards and management teams on cybersecurity strategy and enterprise risk.

Practice Leadership
  • Build, lead, and mentor a team of cybersecurity consultants and engagement leaders.
  • Establish methodologies, service offerings, intellectual property, and delivery standards.
  • Drive recruitment, talent development, and succession planning initiatives.
  • Contribute to overall firm strategy and participate as a senior member of the leadership team.

Thought Leadership
  • Represent the firm in industry conferences, private equity events, and executive forums.
  • Publish insights on cybersecurity trends, transaction-related cyber risks, and emerging threats affecting PE-backed organizations.
  • Develop market-facing content that strengthens the firm's brand and market presence.

Qualifications
  • Bachelor's degree in information security, Computer Science, Business, Engineering, or related field.
  • 15+ years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields.
  • 7+ years serving private equity firms, investment organizations, or PE-backed portfolio companies.
  • Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies.
  • Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization.
  • Demonstrated success generating and managing a significant consulting revenue portfolio.
  • Deep understanding of cybersecurity strategy, risk management, governance, cloud security, resilience, and regulatory compliance.
  • Experience leading cybersecurity due diligence and post-acquisition value creation initiatives.
  • Strong executive presence with the ability to influence boards, investors, and C-suite stakeholders.
  • Industry certifications such as CISSP, CISM, CRISC, CISA, or equivalent.
  • Proven experience leading large consulting teams and complex client engagements.

What Kroll employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply