What are the responsibilities and job description for the Managing Director, Cyber Risk position at Kroll?
We are seeking a Managing Director to lead and expand our Cybersecurity Advisory practice serving the Private Equity (PE) sector. This executive will be responsible for driving growth, developing trusted relationships with PE sponsors and portfolio company executives, and delivering strategic cybersecurity advisory services that enhance investment outcomes and enterprise value.
The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities.
The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue.
Key Responsibilities
Business Development & Client Leadership
The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities.
The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue.
Key Responsibilities
Business Development & Client Leadership
- Develop and execute the firm's Private Equity Cybersecurity Advisory growth strategy.
- Build and maintain C-suite and executive-level relationships with private equity sponsors, operating partners, investment professionals, and portfolio company leadership teams.
- Originate, qualify, and close new advisory engagements across the PE lifecycle.
- Serve as the executive sponsor for strategic client relationships and key accounts.
- Achieve individual and practice revenue, profitability, and growth objectives.
- Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services.
- Lead cybersecurity diligence engagements for buy-side and sell-side transactions.
- Advise investors on cyber risks that may impact valuation, deal structure, integration strategy, or post-close investments.
- Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of prospective acquisition targets.
- Deliver actionable recommendations that enable informed investment decisions and accelerated value creation.
- Partner with PE sponsors and portfolio company executives to develop cyber transformation and risk reduction roadmaps.
- Design and oversee cybersecurity improvement programs that support growth, scalability, and exit readiness.
- Guide executives in strengthening cyber governance, third-party risk management, incident response, cloud security, identity management, and regulatory compliance.
- Advise boards and management teams on cybersecurity strategy and enterprise risk.
- Build, lead, and mentor a team of cybersecurity consultants and engagement leaders.
- Establish methodologies, service offerings, intellectual property, and delivery standards.
- Drive recruitment, talent development, and succession planning initiatives.
- Contribute to overall firm strategy and participate as a senior member of the leadership team.
- Represent the firm in industry conferences, private equity events, and executive forums.
- Publish insights on cybersecurity trends, transaction-related cyber risks, and emerging threats affecting PE-backed organizations.
- Develop market-facing content that strengthens the firm's brand and market presence.
- Bachelor’s degree in information security, Computer Science, Business, Engineering, or related field.
- 15 years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields.
- 7 years serving private equity firms, investment organizations, or PE-backed portfolio companies.
- Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies.
- Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization.
- Demonstrated success generating and managing a significant consulting revenue portfolio.
- Deep understanding of cybersecurity strategy, risk management, governance, cloud security, resilience, and regulatory compliance.
- Experience leading cybersecurity due diligence and post-acquisition value creation initiatives.
- Strong executive presence with the ability to influence boards, investors, and C-suite stakeholders.
- Industry certifications such as CISSP, CISM, CRISC, CISA, or equivalent.
- Proven experience leading large consulting teams and complex client engagements.