C

Capco

Advises banks, insurers and energy companies

Principal Consultant - Cybersecurity

Risk, Regulatory & Legal AdvisoryConfirmed live in the last 24 hours
Full-timeNew York, NY, USA$154k - $192kIn-person

About the Job

Requirements

  • At least 7 years of experience in cybersecurity, technology risk, information security, or cyber advisory roles.
  • Experience working in a management consulting or technology consulting environment.
  • Deep knowledge of industry frameworks and standards, including NIST, ISO 27001, FFIEC, CIS, and other relevant regulatory and cybersecurity frameworks.
  • Experience across multiple cybersecurity domains, including Operational Resilience, Data Security, Identity & Access Management, Cloud Security, Digital Trust, Threat & Vulnerability Management, Security Governance, or Cyber Risk Management.
  • Knowledge of AI and GenAI governance, AI risk management, model security, responsible AI principles, and emerging regulatory considerations associated with AI adoption.
  • Proven experience conducting cyber risk assessments, control evaluations, maturity assessments, and strategic cybersecurity transformation initiatives.
  • Ability to communicate complex cybersecurity, technology, and AI-related risks to technical and non-technical audiences, including executive leadership.
  • Understanding of security engineering principles and secure development practices across the system development lifecycle.
  • Experience leading projects independently, managing client relationships, developing proposals, and designing cybersecurity solutions.
  • Strong storytelling, presentation, and communication skills, with advanced proficiency in PowerPoint and Excel.
  • Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.

Responsibilities

  • Lead cybersecurity, technology risk, and AI governance engagements for global financial institutions, helping clients identify, assess, and mitigate cyber and emerging technology risks.
  • Assess platforms, applications, cloud environments, AI-enabled solutions, and third-party services to identify risks related to data protection, model security, unauthorized access, regulatory compliance, and operational resilience.
  • Design and implement cybersecurity strategies, governance frameworks, policies, standards, and controls that align business objectives with security, privacy, and regulatory requirements.
  • Lead client workshops, executive presentations, and strategic advisory engagements while managing consulting teams and project delivery across multiple initiatives.
  • Develop thought leadership, reference architectures, security automation capabilities, AI risk management frameworks, white papers, and market-facing intellectual property to enhance cybersecurity and AI advisory offerings.

About the Company

Capco

Advises banks, insurers and energy companies

Capco advises banks, payment companies, insurers, asset managers, and energy firms on strategy, regulation, and technology, and unlike generalist consultancies it sticks to finance and energy. In 2021, Capco became the largest acquisition in the history of Indian IT services company Wipro, which bought it to expand its consulting for banks. Clients hire Capco teams to redesign operations, comply with regulations, modernize payment and trading systems, and adopt AI under strict risk controls, while its engineers build the software behind those changes. Clients pay for consultants' time or a fixed project price, and Capco staff often work on site with client teams. Capco was founded in Belgium in 1998 and is based in London.

Company size
5,001-10,000
Company stage
Acquired
Total funding
$80M
Headquarters
London, United Kingdom
Founded
1998

Recently Posted Jobs

Explore more opportunities at Capco

See more jobs