LogoFresh Jobs Ahead
CFGI
CFGI
501 – 1,000 Employees
Skilled Worker Visa SponsorConsultingHealthcareManufacturing
CFGI is an independent accounting advisory firm that works with CFOs and finance teams on complex financial, operational, and strategic challenges. Its services span technical and operational accounting, capital markets and transaction advisory, strategic finance, analytics, ESG and sustainability reporting, tax and valuation, risk and compliance, cybersecurity, forensic accounting, and business transformation. CFGI serves organizations across business services, financial services, healthcare, life sciences, and manufacturing, helping them strengthen finance operations, manage change, and make informed decisions as their businesses evolve.
LinkedIn
Company Jobs

Senior Manager, Cybersecurity GRC, Data Privacy and Technical Risk at CFGI

Lead CFGI cybersecurity advisory engagements for private equity and public-company clients. Drive governance, risk, privacy, compliance, and technical security programs.

USUnited StatesHybridFull-timeSeniorEnglish RequiredSecurity Engineer
AWSAzureCloudCyber SecurityFirewalls

Description

  • Lead GRC and privacy engagements from scoping through executive reporting, including planning, delivery, and quality assurance
  • Design and implement cybersecurity governance models covering policies, standards, risk appetite, committees, reporting, KPIs, and KRIs
  • Build and mature enterprise risk programs through assessments, risk registers, control libraries, control rationalization, and testing approaches
  • Create and implement security policies, standards, and procedures aligned with leading cybersecurity frameworks
  • Support regulatory preparedness and compliance programs
  • Establish or improve privacy programs spanning data inventories, mapping, DPIAs and PIAs, DSARs, retention, consent, third-party privacy risk, and privacy by design
  • Conduct vendor and third-party risk assessments and develop scalable TPRM operating models
  • Assess technical controls across cloud, network, endpoint, identity, application, data, and security operations environments
  • Review security architecture and configuration evidence across Azure, AWS, Microsoft 365, identity providers, firewalls, EDR and XDR, SIEM, vulnerability management, backup, and data protection technologies
  • Evaluate IAM, vulnerability and patch management, logging, monitoring, detection, incident response, secure configuration, segmentation, encryption, key management, backup and recovery, DLP, and resilience controls
  • Confirm control implementation through interviews and reviews of documentation, configuration samples, screenshots, reports, tickets, and related evidence
  • Support cyber due diligence, post-acquisition integration, carve-outs, and accelerated maturity improvements by identifying material technical risks and defining remediation roadmaps
  • Convert complex technical, regulatory, and privacy obligations into practical business recommendations
  • Prepare board and audit committee materials, risk heatmaps, maturity assessments, target operating models, roadmaps, and dashboards
  • Advise senior leaders and facilitate informed risk decisions
  • Coordinate Legal, IT, Security, Compliance, Product, HR, Internal Audit, and business stakeholders
  • Help develop go-to-market offerings, templates, accelerators, methodologies, and thought leadership
  • Support business development through proposals, SOWs, client presentations, solution design, and effort estimates
  • Mentor consultants and managers while leading teams across multiple engagements
  • Collaborate with other CFGI service lines to provide integrated solutions

Requirements

  • At least eight years of relevant experience in cybersecurity GRC, technical risk, privacy, compliance, security consulting, or a related combination
  • Demonstrated experience implementing and operating cybersecurity frameworks and control programs such as NIST CSF, ISO 27001/27002, CIS Controls, SOC 2, CMMC, or comparable standards
  • Strong foundational knowledge of privacy principles
  • Working technical knowledge in at least four areas, including cloud security, IAM/PAM, network security, endpoint security, vulnerability management, SIEM and security monitoring, incident response, application security, data protection, or backup and recovery
  • Ability to assess technical artifacts and configuration evidence and identify control design or operating deficiencies
  • Experience leading enterprise or security risk assessments, technical control assessments, control design and testing, policy and standards development, TPRM, and regulatory readiness initiatives
  • Experience with GDPR or UK GDPR and CCPA or CPRA, plus exposure to HIPAA, GLBA, or other sector-specific privacy regulations
  • Ability to explain technical control deficiencies in clear business and regulatory risk terms
  • Outstanding written and verbal communication skills, including experience producing concise executive-level deliverables
  • Proven ability to lead teams, manage multiple workstreams, schedules, and budgets, and deliver in a client-facing consulting environment
  • Certifications and hands-on platform experience identified as Nice to Have are preferred but not required

Benefits

  • Competitive compensation
  • Benefits package
  • Clear opportunities for career advancement
  • Collaborative culture offering autonomy, flexibility, and strong leadership support
  • High-impact assignments with sophisticated clients and private equity portfolio companies
  • Opportunity to help build and expand a fast-growing Cybersecurity practice

Related Jobs