Privacy & Cyber Risk Consultant

Privacy & Cyber Risk Consultant Working at Lockton At Lockton, we’re passionate about helping our people achieve their ultimate potential. Our people are curious, action-oriented and always striving to make ourselves and those around us better. We’re active listeners working to ensure understanding and problem solvers developing innovative solutions. If you can see yourself delivering excellent service to clients, giving back to our communities and being a part of our caring culture, you belong here. Business unit Lockton Management, LLC Schedule Full-time Lockton Benefits Offerings Click Here Workplace Hybrid Your Responsibilities Lockton’s Privacy & Cyber Risk Team partners with clients to strengthen their data protection and cybersecurity strategies. As a Privacy & Cyber Risk Consultant, you will report into the Cyber & Technology team and collaborate with brokers to design and deliver risk improvement and loss control strategies. This role blends technical expertise with client facing advisory work, helping organizations across industries build resilience against evolving cyber threats. Key Responsibilities • Conduct interview based assessments of client data protection and cybersecurity postures. • Review insurance applications to identify and prioritize risk improvement opportunities. • Evaluate compensating controls that meet underwriting requirements and advocate on behalf of clients. • Develop strategic roadmaps to enhance privacy and cyber resilience. • Facilitate client discussions on IT dependencies, security investments, and cyber insurance procurement. • Coordinate implementation of agreed data protection service models. • Lead tabletop exercises and workshops to assess incident readiness and response. • Facilitate incident response tabletops, cybersecurity maturity assessments, and cyber risk quantification workshops — both virtually and in person. • Assist in developing tailored breach response plans aligned with client objectives and risk tolerance. • Deliver training workshops on privacy, cybersecurity, and risk improvement strategies. • Collaborate with colleagues in product, claims, and analytics to enhance client experience. • Build and maintain relationships with insurers, cybersecurity firms, law firms, and other vendors. • Contribute to thought leadership initiatives and support internal learning for Producers and Associates. #LI-JM Qualifications • Minimum: Bachelor’s degree in a technical field (cybersecurity, information assurance, computer science, or related discipline). • Preferred: Master’s degree or other advanced degree in a relevant field. • Significant experience (generally 8–10+ years) managing privacy and/or cybersecurity risk, with flexibility based on depth and quality of experience. • Strong knowledge of data protection and cybersecurity legal/regulatory frameworks. • Excellent communication skills with the ability to explain complex risks in accessible terms. • Experience working across multiple industries (energy, finance, technology strongly preferred). Preferred Skills & Certifications • Data protection certifications (CIPP, CIPM, CIPT). • Cybersecurity certifications (CISSP, CCSP, CISM, CRISC). • Experience in cyber insurance underwriting, claims, or broking. Additional Details • Travel: 25% Equal Opportunity Statement Lockton Companies is proud to provide everyone an equal opportunity to grow and advance. We are committed to an inclusive culture and environment where our people, clients and communities are treated with respect and dignity. At Lockton, supporting diversity, equity and inclusion is ingrained in our values, and we believe that we are at our best when we fully embrace everyone. We strive to cultivate a caring culture that learns from, celebrates and thrives because of our breadth of differences. As such, we recognize that recruiting, developing and retaining people with diverse backgrounds and experiences is vital and enabling our people to thrive personally and professionally is critical to our long-term success.