Job Description: Senior Associate, Cyber Security Disputes & Investigations
Overview
Alvarez & Marsal, a leading independent global professional services firm, specializing in providing turnaround management, performance improvement, and corporate advisory services, is seeking to expand its Disputes & Investigations team. With more than 7,000 professionals based in 75+ locations across 30+ countries in North America, Europe, Asia, and Latin America, our firm excels in problem-solving and value creation. Drawing on a strong operational heritage and hands-on approach, our professionals work closely with organizations and stakeholders to help tackle complex business issues and maximize value.
The Position
As a Senior Associate within A&M's Cybersecurity practice in the Disputes & Investigations group, you will play a key role in delivering cybersecurity, privacy, risk, and AI governance engagements across diverse industries. You will work directly with clients to assess cybersecurity posture, identify risks, develop remediation roadmaps, and support implementation of security and governance frameworks.
The successful candidate will contribute to and independently execute engagements involving:
Cybersecurity Program Maturity Assessments
- Evaluate cybersecurity programs against industry frameworks including ISO 27001, NIST CSF, CIS Controls, COBIT, and other regulatory requirements.
- Assess governance structures, security operating models, policies, standards, and controls.
- Develop maturity assessments, gap analyses, and improvement roadmaps.
IT Risk & Security Assessments
- Lead cybersecurity risk assessments across applications, infrastructure, cloud environments, and third-party ecosystems.
- Perform security reviews, data classification exercises, and control effectiveness assessments.
- Identify cybersecurity risks and provide practical mitigation recommendations.
Data Privacy & Regulatory Compliance
- Conduct privacy assessments against DPDPA, GDPR, ISO 27701, and other applicable regulations.
- Support development and implementation of privacy governance frameworks, policies, and operating procedures.
- Assist clients in privacy program enhancement, data lifecycle reviews, and compliance readiness initiatives.
AI Security & Governance
- Assess AI systems for security, privacy, governance, and compliance risks.
- Support implementation of AI governance frameworks, risk management practices, and responsible AI controls.
- Evaluate controls related to GenAI solutions, model governance, data protection, and regulatory requirements.
Security Awareness & Cyber Culture
- Design and deliver cybersecurity and privacy awareness initiatives.
- Develop training content, phishing simulation programs, and executive awareness sessions.
- Support clients in building sustainable cyber risk awareness programs.
Cybersecurity Architecture & Technical Reviews
- Participate in security assessments across cloud, infrastructure, application security, identity and access management, and data security domains.
- Review technical controls and architectures against security best practices and industry standards.
- Identify gaps and recommend improvements aligned to organizational risk appetite.
Research & Thought Leadership
- Monitor emerging cybersecurity threats, industry trends, AI security developments, and evolving regulatory requirements.
- Contribute to thought leadership, methodologies, accelerators, and market-facing content.
Role and Responsibilities
Client Delivery
- Independently execute cybersecurity, privacy, and governance engagements with minimal supervision.
- Conduct stakeholder interviews, workshops, control assessments, and documentation reviews.
- Analyze findings, prioritize risks, and develop actionable recommendations.
- Prepare high-quality client reports, presentations, and executive briefings.
Project Management
- Manage workstreams and deliverables while ensuring quality and adherence to timelines.
- Coordinate with client stakeholders and internal teams to drive project execution.
- Support proposal development, scoping activities, and business development efforts.
Team Leadership & Collaboration
- Mentor Analysts and Associates through technical guidance and quality reviews.
- Foster collaboration across multidisciplinary teams.
- Contribute to capability building, knowledge sharing, and practice development initiatives.
Business Development Support
- Contribute to proposal preparation, market research, and solution development.
- Participate in client meetings, workshops, and networking activities.
Continuous Learning
- Stay current on cybersecurity, AI governance, privacy regulations, and industry best practices.
- Pursue relevant professional certifications and technical skill development.
The Requirements
Education & Experience
- Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.
- Minimum 4-6 years of relevant cybersecurity consulting, risk advisory, or information security experience.
- Experience delivering cybersecurity assessments, governance reviews, privacy initiatives, or compliance programs.
Technical Competencies
Cybersecurity Governance & Risk
- Strong understanding of cybersecurity frameworks and standards including: ISO 27001, NIST CSF, CIS Controls, ISO 22301, ISO 27701
AI Security & Governance
- Understanding of AI governance frameworks, AI risk management principles, and responsible AI practices.
- Awareness of emerging AI security risks including model security, prompt injection, adversarial attacks, and data privacy concerns.
Data Privacy & Compliance
- Experience working with DPDPA, GDPR, ISO 27701, or similar privacy regulations and standards.
- Knowledge of privacy impact assessments and data protection controls.
Preferred Certifications
One or more of the following certifications are preferred: CISSP, CISA, CISM, Certified Data Privacy Professional (CIPP)
Soft Skills
- Strong analytical and problem-solving capabilities.
- Excellent report writing and presentation skills.
- Ability to communicate effectively with technical and executive stakeholders.
- Strong stakeholder management and client-facing skills.
- Ability to manage multiple priorities in a fast-paced consulting environment.
- Demonstrated ownership, accountability, and attention to detail.
Language
- Fluent written and verbal communication in English.
At Alvarez & Marsal, our core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity guide everything we do, shaping a culture rooted in entrepreneurship, impact, and integrity. We trust our people to take ownership early, contribute to meaningful challenges, and drive results that matter. We empower growth and champion diverse perspectives. Above all, we value doing the right thing. For those ready to roll up their sleeves, lead with integrity, and be difference makers, this is where it starts.
It is Alvarez & Marsal’s practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here.
Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.
