Consultant - Cybersecurity

We Do Consulting Differently

With teams of industry specialists and experts in forensic accounting and global investigations, discovery and forensic technology, M&A and private equity disputes, and cybersecurity and AI risk, BRG is a leader in the areas that can impact business most significantly.

With a multidisciplinary team of cybersecurity specialists and AI risk specialists, our AI-native practice is at the forefront of enterprise resilience and safeguarding AI. We address the risks that matter most to boards, C-suites, and risk functions across financial services, technology, healthcare, and critical infrastructure.

Our practice is expanding, and we are seeking an experienced cybersecurity and AI risk Consultant with a strong track record leading complex advisory engagements across cybersecurity, and emerging AI risk.

The Consultant will play a leading role in the delivery of client engagements while contributing to business development and practice growth. The role will involve supporting multidisciplinary teams, developing trusted senior-client relationships, mentoring junior staff, and helping shape BRG’s evolving cybersecurity & AI risk capabilities.

You will lead workstreams and select engagements and drive client impact across:

• Cybersecurity and AI maturity assessments and strategic roadmaps, using leading frameworks including NIST, CIS and CRI
• Cybersecurity strategy, operating models, and transformation programs
• Cyber and AI risk governance, executive and board reporting
• Third-party cyber and AI risk management
• Cyber resilience, incident preparedness, and executive tabletop exercises
• Cybersecurity and AI benchmarking assessments
• Cyber risk quantification and business-impact analysis

 Key responsibilities include:

• Support multidisciplinary teams through complex cybersecurity and AI risk programs, managing scope, schedule, resources, quality, and client satisfaction
• Translate complex technical and risk findings into clear executive-level insights, business implications, and board-ready recommendations
• Build and deepen client relationships through technical credibility and strategic thinking
• Identify follow-on opportunities, contribute to proposals and pursuit activity, and support the continued growth of client accounts and the practice
• Scope and shape new cybersecurity and AI risk engagements in collaboration with senior staff, Managing Directors and other BRG leaders
• Mentor junior staff and contribute to coaching and team development
• Develop methodologies, intellectual property, thought leadership collateral, and market-facing propositions

Basic Qualifications:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, Business Administration, Risk Management, or a related discipline
• Minimum 4 years of professional experience in cybersecurity, technology risk, or enterprise risk consulting
• Demonstrated experience leading consulting engagements or complex cybersecurity/risk programs
• Demonstrated understanding of emerging AI governance, risk, and control requirements; experience designing or implementing AI governance or control frameworks e.g. NIST AI RMF, CRI FS AI RMF, ISO/IEC 42001 is preferred
• Experience managing client relationships and communicating with senior executive stakeholders
• Strong written and verbal communication skills, including the ability to communicate technical risks in business terms
• Strong analytical and problem-solving skills, with the ability to structure ambiguous issues, synthesize complex information, and develop practical recommendations

Preferred Qualifications:

• CISSP, CISM, CRISC, or another relevant advanced security or risk certification
• Experience within a Big 4 firm, specialist cybersecurity consultancy, or comparable advisory firm
• Experience scoping and proposing cybersecurity and AI risk engagements with demonstrated contribution to business development and sales
• Track record of delivering enterprise cybersecurity transformations, large-scale governance programs, or risk-management implementations
• Experience presenting cybersecurity or technology-risk issues to executive leadership

Salary Range: $130,000 – $150,000 per year. Bonus Eligible.

Candidate must be able to submit verification of his/her legal right to work in the U.S. or Canada, without company sponsorship. 

About BRG

BRG combines world-leading academic credentials with world-tested business expertise and purpose-built emerging technologies. Our culture centers on agility and connectivity which sets us apart and gets you ahead.  

At BRG, our professionals include specialist consultants, industry experts, renowned academics, and leading-edge data scientists. Together, they bring a diversity of real-world experience, data, and human and artificial intelligence, to economics, disputes, and investigations; corporate finance; and performance improvement services that address the most complex challenges facing organizations across the globe.

Our unique structure nurtures the interdisciplinary relationships that give us the edge, laying the groundwork for more informed insights and more original, incisive thinking.  When paired with our global reach and resources, our diverse perspectives and technical capabilities make us uniquely capable to address our clients’ challenges. We get results because we know how to apply our thinking to your world.

At BRG, we don’t just show you what’s possible. We’re built to help you make it happen. 

BRG is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, religion, color, sex, gender, national origin, age, United States military veteran status, ancestry, sexual orientation, marital status, family structure, medical condition including genetic characteristics or information, veteran status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law.