Hampton North · 16 hours ago
Cyber Security Consultant
Hampton North is a growing cybersecurity advisory firm seeking a Cyber Risk Consultant to work directly with enterprise security leadership. This role involves leading cybersecurity assessments, quantifying cyber risk, and providing advisory services to enhance security programs across complex environments.
Staffing & Recruiting
Responsibilities
Lead cybersecurity assessments across enterprise environments, evaluating governance structures, technical controls, and operating practices
Interview stakeholders across security, IT, and business teams to document current-state controls and program maturity within a proprietary risk platform
Translate control effectiveness into quantified financial risk exposure and track measurable reduction over time
Evaluate alignment to frameworks such as NIST CSF and ISO 27001 and produce prioritized, defensible remediation roadmaps
Present findings directly to CISOs and senior leadership in clear business terms
Own a portfolio of client engagements operating within a structured year-long advisory model
Contribute to related efforts including tool rationalization, risk modeling, and broader security program optimization
Qualification
Required
2+ years of cybersecurity consulting or enterprise security program experience for Consultant level, or 5+ years for Senior Consultant level
Client-facing experience in a consulting environment such as Big Four
Working exposure across multiple security domains including governance, IAM, cloud security, application security, infrastructure security, and risk management
Practical familiarity with security technologies and control implementation
Experience conducting structured risk assessments and building actionable mitigation plans
Experience presenting to executive stakeholders and translating technical findings into business impact
Ability to independently manage client relationships and deliverables
Bachelor's degree in cybersecurity, information systems, computer science, or related field
Working knowledge of cybersecurity frameworks such as NIST CSF, ISO 27000 series, or similar standards