Principal Consultant, Cybersecurity

A principal consultant in Capco's Cyber Advisory practice in New York, leading cybersecurity and technology risk engagements for financial institutions and managing the consulting teams that deliver them. The practice increasingly helps clients adopt AI securely and govern it responsibly.

The consultant advises senior client stakeholders on cybersecurity strategy, governance programs and enterprise risk, including the risks raised by cloud adoption, digital transformation and AI. The work includes assessing platforms, applications, cloud environments, AI solutions and third parties for weaknesses in data protection, model security, access control, compliance and resilience, then designing the strategies, frameworks, policies and controls that address them. The role runs workshops and executive presentations, oversees delivery across several workstreams, contributes to proposals and business development, and produces thought leadership such as AI risk frameworks, reference architectures and white papers.

Capco wants seven or more years in cybersecurity, technology risk or cyber advisory, consulting experience, and deep knowledge of NIST, ISO 27001, FFIEC and CIS. Breadth across domains such as identity, cloud security, data security, vulnerability management and operational resilience is expected, along with knowledge of AI and GenAI governance and model security, experience running risk and maturity assessments, and the ability to explain risk clearly to executives.