Position Details

Type Contract

Experience senior

Exp. Years 5 to 7 years

Education Not specified

Category Consulting & Advisory

About this role

Risk consultant guiding clients through enterprise risk frameworks, cybersecurity risk integration, governance structures, and board-level reporting. Focus on building mature ERM programs and translating risk into business outcomes.

Key Responsibilities

Lead enterprise risk assessments; design or mature ERM frameworks; assess technology and information risk; assess governance structures; contribute to business development

Technical Overview

Experience with COSO ERM, ISO 31000, NIST RMF; risk appetite and indicators; governance and board communication; program design and maturity assessments.

Ideal Candidate

The ideal candidate is an senior risk consultant with 5+ years in enterprise risk management or consulting, strong COSO/ISO RMF experience, and ability to translate risk into board-ready insights.

Must-Have Skills

Minimum 5 to 7 years of experience in enterprise risk managementinternal auditmanagement consultingor a closely related disciplineHands-on experience with COSO ERMISO 31000or a comparable ERM frameworkExperience working with senior leadership and boardsCybersecurity literacy to engage with IT and security teamsStrong written and verbal communication skills

Nice-to-Have Skills

CRISCCRMACIACISMMBA or advanced degree2+ years of consulting or client-facing advisory experienceFamiliarity with sector-specific regulatory environmentsExperience with quantitative risk methodologies such as FAIR

Required Skills

enterprise risk managementCOSO ERMISO 31000NIST RMFrisk appetitekrithree-lines-of-defenseboard reportingFAIR

Hard Skills

enterprise risk managementCOSO ERMISO 31000NIST RMFrisk appetitekey risk indicatorsthree-lines-of-defenseboard reportingquantitative risk methodologiesFAIR (preferred)

Soft Skills

leadershipcommunicationfacilitationstorytelling with datastakeholder management

Certifications

Preferred

CRISCCRMACIACISM

Industry & Role

Industry Technology

Job Function Advisory and delivery of enterprise risk and GRC programs for clients

Role Subtype Risk Consultant

Tech Domains COSO ERM, ISO 31000, NIST RMF

Keywords for Your Resume

risk managemententerprise risk managementCOSO ERMISO 31000NIST RMFrisk appetitekri3 lines of defenseboard reportinggaofairconsultingregulatory environmentsleadershipstakeholder managementdata analyticsrisk registersepicrisk assessmentcoso ermiso 31000nist rmfkris

Deal Breakers

Lack of ERM experience, Inability to work remotely, No experience with COSO/ISO RM frameworks

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile

Risk Management Consultant – GRC Practice

Get matched to jobs like this