Cyber Risk Consultant - Financial Services

Job Title: Cyber Risk Consultant - Financial Services / BISO / AI Governance

Location: Charlotte, NC (Remote)

Day to Day job Duties: (what this person will do on a daily/weekly basis)

• Conduct cyber risk assessments and technology reviews for new and existing technology initiatives within a regulated financial services environment.
• Perform toll gate reviews for cyber-related technology intake requests to ensure cybersecurity and risk requirements are identified, documented, and addressed before initiatives advance.
• Partner with technology teams, business stakeholders, Cyber SMEs, and cross-functional teams to evaluate technology solutions, assess control adequacy, identify gaps, and provide actionable risk guidance throughout the project lifecycle.• Support the AI Center of Excellence (CoE) by performing cybersecurity risk evaluations of Artificial Intelligence, Machine Learning, Generative AI, and other emerging technology solutions.
• Collaborate with Cyber SMEs, business stakeholders, and technology partners to ensure AI initiatives align with established cybersecurity standards, governance frameworks, and risk management requirements.
• Represent the BISO team in supporting AI CoE processes, including conducting reviews, managing and clearing Technology Evaluation and other BISO intake request backlogs, sustaining operational processes, and building reporting capabilities.
• Evaluate cybersecurity risks across IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, Compliance, and other security domains.
• Assess cybersecurity controls against established frameworks such as NIST, ISO 27001, or equivalent cybersecurity control frameworks.
• Evaluate third-party and vendor cybersecurity risks and identify appropriate security and risk management requirements.
• Review AI and Machine Learning architectures, technology solutions, data flows, and associated cybersecurity risk vectors to support risk evaluations and governance decisions.
• Develop and maintain reporting capabilities, metrics, dashboards, and management reporting for cyber risk assessments, technology evaluations, AI governance, and BISO activities.
• Facilitate working sessions and communicate complex cybersecurity and technology risk concepts clearly to technical and non-technical stakeholders.
• Build trusted relationships and collaborate effectively with Cyber SMEs, technology partners, business stakeholders, and business leaders.

Basic Qualifications: (what are the skills required to this job with minimum years of experience on each)

• Minimum 7+ years of hands-on experience in Cybersecurity Risk Management, Technology Risk, Information Security, or Cybersecurity Governance.
• Minimum 7+ years of experience working within the Financial Services, Banking, Insurance, Brokerage, or other highly regulated industry.
• Minimum 5+ years of experience identifying technology risks, defining cybersecurity control requirements, identifying control gaps, and proposing risk mitigation strategies.• Minimum 5+ years of experience conducting cybersecurity risk assessments, technology reviews, and control assessments.
• Minimum 5+ years of experience across cybersecurity domains including IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, and Compliance.
• Minimum 5+ years of experience with cybersecurity control frameworks such as NIST, ISO 27001, or equivalent industry frameworks.
• Minimum 3+ years of experience assessing cybersecurity risks associated with AI, Machine Learning, Generative AI, or other emerging technologies.
• Minimum 3+ years of experience evaluating AI and Machine Learning architectures, associated cybersecurity risk vectors, data protection risks, and evaluation methodologies.
• Minimum 3+ years of experience with third-party or vendor cybersecurity risk assessments and due diligence.
• Minimum 3+ years of experience supporting BISO, Cyber Risk, Technology Risk, Information Security Governance, or Enterprise Risk Management functions.
• Minimum 3+ years of experience managing technology evaluation requests, cyber risk intake processes, BISO intake requests, or similar cybersecurity governance workflows.
• Strong understanding of cybersecurity risk identification, control assessment, risk remediation, risk acceptance, issue management, and risk reporting.
• Strong communication and stakeholder management skills with the ability to communicate complex cybersecurity and technology risk concepts to both technical and non-technical audiences.
• Strong experience facilitating working sessions and collaborating with Cyber SMEs, technology teams, business stakeholders, and senior leadership.
• Minimum 5+ years of experience working independently, managing multiple priorities, and delivering tasks within project timelines.

Preferred Certifications:

At least one of the following certifications is preferred:  CISSP, CISM, CRISC, CISA

Nice to Have; (But not a must)

• Experience working within or supporting a BISO function at a financial institution.
• Experience supporting an AI Center of Excellence (CoE) or enterprise AI governance program.
• Experience with AI governance frameworks, AI risk management, model risk management, or responsible AI practices.• Experience with enterprise risk management programs within a regulated financial services environment.
• Experience developing cybersecurity risk dashboards, metrics, and executive reporting.
• Experience working with Agile, Scrum, or enterprise governance processes.

Travel: N/A

Degree: Bachelor’s degree in computer science, Information Systems, Cybersecurity, Engineering, Risk Management, or equivalent work experience.