ZipRecruiter

Log In

1

Cybersecurity Risk Consultant Jobs (NOW HIRING)

Drawbridge

Cybersecurity Risk Associate

New York, NY · On-site

$90K - $105K/yr

Working in Client Success You will be joining a team of technical cybersecurity consultants who ... Conduct risk assessments and security audits of client cloud environments * Assess the security ...

next page

Showing results 1-20

All JobsCybersecurity Risk Consultant Jobs

Cybersecurity Risk Consultant information

See salary details

$29

$63

$93

How much do cybersecurity risk consultant jobs pay per hour?

As of Jun 14, 2026, the average hourly pay for cybersecurity risk consultant in the United States is $63.41, according to ZipRecruiter salary data. Most workers in this role earn between $47.84 and $76.44 per hour, depending on experience, location, and employer.

What does a cyber risk consultant do?

A cybersecurity risk consultant assesses an organization's security posture by identifying vulnerabilities, analyzing potential threats, and recommending measures to mitigate risks. They often use tools like risk assessment frameworks and may hold certifications such as CISSP or CISM to evaluate and improve cybersecurity defenses.

What is the 80 20 rule in cyber security?

The 80/20 rule in cybersecurity, often called the Pareto Principle, suggests that approximately 80% of security issues are caused by 20% of vulnerabilities or threats. Cybersecurity risk consultants focus on identifying and mitigating these critical vulnerabilities to improve overall security posture efficiently.

How much do cyber security consultants get paid?

Cybersecurity risk consultants typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior consultants with specialized skills or certifications like CISSP or CISA can earn higher salaries, often exceeding $150,000. Compensation also varies based on the industry and the complexity of the security environment they manage.

Can you make $500,000 a year in cyber security?

Cybersecurity Risk Consultants and senior cybersecurity professionals with extensive experience, advanced certifications, and specialized skills can potentially earn $500,000 or more annually, especially in high-demand industries or senior leadership roles. Achieving this level often requires a combination of technical expertise, strategic responsibilities, and often working in consulting or executive positions.
What cities are hiring for Cybersecurity Risk Consultant jobs? Cities with the most Cybersecurity Risk Consultant job openings:
What states have the most Cybersecurity Risk Consultant jobs? States with the most job openings for Cybersecurity Risk Consultant jobs include:
Privacy & Cyber Risk Consultant

Privacy & Cyber Risk Consultant

Lockton, Inc.

Kansas City, MO • On-site

Full-time

Posted 24 days ago

Lockton rating

8.1

Company rating: 8.1 out of 10

Based on 13 frontline employees who took The Breakroom Quiz

134th of 261 rated insurance

Job description

Job Summary:
Lockton's Privacy & Cyber Risk Team partners with clients to strengthen their data protection and cybersecurity strategies. As a Privacy & Cyber Risk Consultant, you will report into the Cyber & Technology team and collaborate with brokers to design and deliver risk improvement and loss control strategies. This role blends technical expertise with client facing advisory work, helping organizations across industries build resilience against evolving cyber threats.
Key Responsibilities
• Conduct interview based assessments of client data protection and cybersecurity postures.
• Review insurance applications to identify and prioritize risk improvement opportunities.
• Evaluate compensating controls that meet underwriting requirements and advocate on behalf of clients.
• Develop strategic roadmaps to enhance privacy and cyber resilience.
• Facilitate client discussions on IT dependencies, security investments, and cyber insurance procurement.
• Coordinate implementation of agreed data protection service models.
• Lead tabletop exercises and workshops to assess incident readiness and response.
• Facilitate incident response tabletops, cybersecurity maturity assessments, and cyber risk quantification workshops - both virtually and in person.
• Assist in developing tailored breach response plans aligned with client objectives and risk tolerance.
• Deliver training workshops on privacy, cybersecurity, and risk improvement strategies.
• Collaborate with colleagues in product, claims, and analytics to enhance client experience.
• Build and maintain relationships with insurers, cybersecurity firms, law firms, and other vendors.
• Contribute to thought leadership initiatives and support internal learning for Producers and Associates.
#LI-JM
Requirements:
• Minimum: Bachelor's degree in a technical field (cybersecurity, information assurance, computer science, or related discipline).
• Preferred: Master's degree or other advanced degree in a relevant field.
• Significant experience (generally 8-10+ years) managing privacy and/or cybersecurity risk, with flexibility based on depth and quality of experience.
• Strong knowledge of data protection and cybersecurity legal/regulatory frameworks.
• Excellent communication skills with the ability to explain complex risks in accessible terms.
• Experience working across multiple industries (energy, finance, technology strongly preferred).
Preferred Skills & Certifications
• Data protection certifications (CIPP, CIPM, CIPT).
• Cybersecurity certifications (CISSP, CCSP, CISM, CRISC).
• Experience in cyber insurance underwriting, claims, or broking.
Additional Details
• Travel: 25%

What Lockton employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply