Principal Consultant, Cybersecurity

About the role

Capco's Cybersecurity Practice is a multi-disciplinary team supporting leading financial institutions in an evolving cyber, technology and regulatory landscape. As a Principal Consultant in the Cyber Advisory Practice, you will advise senior client stakeholders on complex cybersecurity and technology risk engagements across the Financial Services sector, helping clients define and run cybersecurity strategies, strengthen governance, manage enterprise risk and address digital transformation, cloud adoption and AI challenges. You will lead consulting teams, oversee delivery across workstreams, contribute to business development and help grow the practice.

Key responsibilities

• Lead cybersecurity, technology risk and AI governance engagements for global financial institutions, helping clients identify, assess and mitigate cyber and emerging technology risks.
• Assess platforms, applications, cloud environments, AI-enabled solutions and third-party services for data protection, model security, unauthorized access, regulatory compliance and operational resilience risks.
• Design and implement cybersecurity strategies, governance frameworks, policies, standards and controls aligned with business objectives, security, privacy and regulatory requirements.
• Lead client workshops, executive presentations and strategic advisory engagements while managing consulting teams and project delivery.
• Develop thought leadership, reference architectures, security automation capabilities, AI risk management frameworks, white papers and market-facing intellectual property.

Required profile

• 7+ years of experience in cybersecurity, technology risk, information security or cyber advisory roles.
• Experience in a management or technology consulting environment.
• Proven experience conducting cyber risk assessments, control evaluations, maturity assessments and cybersecurity transformation initiatives.
• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Systems or a related field.

Required skills

• Frameworks such as NIST, ISO 27001, FFIEC and CIS.
• Domains such as operational resilience, data security, identity and access management, cloud security, digital trust, threat and vulnerability management, security governance or cyber risk management.
• AI and GenAI governance, AI risk management, model security and responsible AI principles.
• Security engineering principles and secure development practices.
• Project leadership, proposal development and client relationship management.
• Advanced PowerPoint and Excel.

What we offer

• Pay range of $154,000-$192,000 USD.
• Medical, dental and vision insurance, 401(k) plan, tuition reimbursement and wellness programs.
• Continuous learning and professional development.