Risk Management Consultant – GRC Practice - Remote

Overview

The Risk Management Consultant will assist clients in building and maturing enterprise risk programs that address various organizational exposures, integrating cybersecurity into a broader risk framework.

In Short

• Lead enterprise risk assessments across multiple organizational dimensions.
• Help design or mature ERM frameworks tailored to client needs.
• Assess technology and information risk practices with a focus on cybersecurity.
• Evaluate governance structures and assist in building necessary internal frameworks.
• Support business development efforts and contribute to proposal development.
• Engage with senior leadership and boards to facilitate discussions about risk.
• Translate technical findings into business impact terms for non-technical stakeholders.
• Utilize standards like COSO ERM and ISO 31000 in risk assessments.
• Work in a client-facing role requiring strong communication skills.
• Participate in industry events and represent the practice.

Requirements

• 5 to 7 years of experience in enterprise risk management or related fields.
• Hands-on experience with ERM frameworks like COSO ERM or ISO 31000.
• Experience working with senior leadership and facilitating risk discussions.
• Understanding of how to design effective risk programs.
• Cybersecurity literacy to engage with IT and security teams.
• Strong written and verbal communication skills.

Benefits

• Competitive compensation based on experience.
• Project-based engagement with potential for extension.
• Remote work with occasional travel required.