Principal Consultant, Cybersecurity

About the Job

As a Principal Consultant within our Cyber Advisory Practice, you will serve as a trusted advisor to senior client stakeholders, leading complex cybersecurity and technology risk engagements across the Financial Services sector. You will be responsible for helping clients define and execute cybersecurity strategies, strengthen governance programs, manage enterprise risk, and address emerging challenges related to digital transformation, cloud adoption, and artificial intelligence.

What You'll Get to Do

• Lead cybersecurity, technology risk, and AI governance engagements for global financial institutions, helping clients identify, assess, and mitigate cyber and emerging technology risks.
• Perform assessments of platforms, applications, cloud environments, AI-enabled solutions, and third-party services to identify risks related to data protection, model security, unauthorized access, regulatory compliance, and operational resilience.
• Design and implement cybersecurity strategies, governance frameworks, policies, standards, and controls that align business objectives with security, privacy, and regulatory requirements.
• Lead client workshops, executive presentations, and strategic advisory engagements while managing consulting teams and project delivery across multiple initiatives.
• Develop thought leadership, reference architectures, security automation capabilities, AI risk management frameworks, white papers, and market-facing intellectual property that enhances Capco's cybersecurity and AI advisory offerings.

What You'll Bring with You

• 7+ years of experience in cybersecurity, technology risk, information security, or cyber advisory roles.
• Experience working within a management consulting or technology consulting environment.
• Deep knowledge of industry frameworks and standards, including NIST, ISO 27001, FFIEC, CIS, and other relevant regulatory and cybersecurity frameworks.
• Experience across multiple cybersecurity domains, including Operational Resilience, Data Security, Identity & Access Management, Cloud Security, Digital Trust, Threat & Vulnerability Management, Security Governance, or Cyber Risk Management.
• Knowledge of AI and GenAI governance, AI risk management, model security, responsible AI principles, and emerging regulatory considerations associated with AI adoption.
• Proven experience conducting cyber risk assessments, control evaluations, maturity assessments, and strategic cybersecurity transformation initiatives.
• Ability to communicate complex cybersecurity, technology, and AI-related risks to both technical and non-technical audiences, including executive leadership.
• Understanding of security engineering principles and secure development practices across the system development lifecycle.
• Experience leading projects independently, managing client relationships, developing proposals, and designing cybersecurity solutions.
• Strong storytelling, presentation, and communication skills with advanced proficiency in PowerPoint and Excel.
• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.