Field CISO, Cyber Risk

Job summary

You will act as a senior trusted advisor to executive stakeholders, leading complex cyber risk advisory engagements and defining client vision. Additionally, you will oversee GRC services, develop intellectual property, and mentor consultants to support the growth of the Cyber Risk practice.

Job details

In this high-profile senior advisory role, you will draw on your executive-facing consulting experience, cyber risk expertise and business acumen to help clients translate risk, regulatory and technology priorities into practical strategies, roadmaps and delivery outcomes. Through the integrity, care and quality we demonstrate on customer engagements, clients will realize that beyond receiving leading-edge consulting, they are gaining a trusted advisor and long-term partner. What you’ll do · Act as a senior trusted advisor to executive, management and technical stakeholders, leading cyber risk advisory engagements that define client vision, priorities and desired business outcomes. · Deliver and oversee Cyber Risk GRC services, including governance, risk and compliance assessments, program implementations, control gap assessments and internal audits, as well as privacy program assessments and AI governance advisory services. · Lead complex, non-standard client engagements that require senior advisory judgment, cross-practice coordination or customized approaches beyond standard Cyber Risk services. · Conduct executive-level workshops and strategy sessions that help clients understand cyber risk, evaluate options, prioritize initiatives and make informed decisions. · Advise clients on emerging cyber risk, security, privacy and technology trends, including cloud, automation, AI, third-party risk, regulatory change and evolving threat activity. · Guide clients through the implementation and remediation of information security and privacy controls, including controls related to responsible AI use, data protection, consent, accountability and privacy-by-design practices, ensuring recommendations are practical, risk-based and aligned to client operating environments. · Develop and quality review client deliverables such as policies, standards, procedures, risk reports, assessment results, executive summaries, remediation plans, privacy impact assessment outputs and AI governance guidance. · Provide advisory oversight for multi-practice solutions to help ensure cyber risk, privacy and AI governance considerations remain aligned with client objectives. · Lead and support the development of the Cyber Risk practice by creating reusable intellectual property, frameworks, templates, methodologies, service offerings and ready-to-use project tools. · Contribute to thought leadership and market presence through articles, white papers, presentations, webinars, podcasts, client briefings and other external-facing initiatives. · Build strong relationships with CDW sales, solution architecture and consulting teams to support coordinated delivery, identify client needs and enable strategic account growth. · Mentor consultants and support knowledge sharing across the Cyber Risk team through coaching, delivery guidance, quality review and practice enablement activities. · Maintain current knowledge of cyber threats, security technologies, industry trends, risk frameworks, regulatory expectations and leading practices relevant to client engagements. · Prepare and deliver clear executive-ready communications, presentations and recommendations for business, technical and leadership audiences, including topics related to security GRC, privacy risk and AI governance. · Supporting and occasionally leading the pre-sales process, solutioning engagements and complex assessments for prospective clients. What you need to succeed Must-have · 10+ years of experience in cyber risk, information security, privacy, technology risk, GRC consulting or a related advisory role. · Experience advising executive, management and technical stakeholders on cyber risk strategy, security program maturity, risk prioritization and roadmap development. · Strong knowledge of security, privacy and risk frameworks such as ISO 27001, ISO 27017, ISO 27018, ISO 42001, NIST CSF, CIS Controls, PCI DSS, SOC, COBIT, ITIL or similar standards. · Demonstrated experience leading complex client engagements, including assessments, audits, remediation planning, program reviews, control implementation support and executive reporting. · Ability to translate business objectives, regulatory requirements and technical risks into clear recommendations, practical roadmaps and client-ready deliverables. · Strong executive communication and presentation skills, with the ability to explain complex cyber risk concepts to business, technical and leadership audiences. · Experience developing client deliverables such as policies, standards, procedures, assessment reports, risk registers, roadmaps, executive summaries and strategy documents. · Ability to build strong relationships with clients, sales teams, solution architects and consulting practices to support coordinated delivery and account growth. · Experience mentoring consultants, supporting quality review activities and contributing to internal practice development or process improvement initiatives. · Hold three or more relevant professional designations such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, AIGP, CCSP, CIPP/C or CCISO. · Strong proficiency with Microsoft Office products, including Outlook, Word, PowerPoint, Excel and Visio. · Hold a relevant college or university degree, or equivalent professional experience. Nice-to-have · Experience working in or advising regulated industries such as financial services, healthcare, government, education or professional services. · Experience developing cyber risk service offerings, methodologies, assessment tools, templates, playbooks or other reusable delivery assets. · Experience contributing to thought leadership, including articles, white papers, presentations, webinars, podcasts, client briefings or industry events. · Experience with emerging cyber risk areas such as AI governance, cloud security, third-party risk management, privacy risk, operational resilience or cyber incident readiness. · Familiarity with GRC platforms, security assessment tooling or workflow automation used to support risk and compliance programs. · Certified Chief Information Security Officer (CCISO) designation or equivalent executive security leadership experience. CDW is committed to being an AI-fluent organization We’re looking for people who bring curiosity, a learner’s mindset, and a willingness to engage with ever-evolving technology and tools. We value adopting AI as a partner, openness to experimentation, and a shared interest in learning together on AI. Our goal is to create a culture where AI enhances—not replaces—human creativity and decision-making. You don’t need to be an expert today; what matters is your readiness to explore, adapt, and grow with us as we integrate AI responsibly and effectively into our work. Additionally, CDW is committed to fostering an equitable, transparent, and respectful hiring process for all applicants. During our application process, our goal is to understand your experience, strengths, skills, and qualifications. As an AI forward company, we see AI not just as a tool, but as a catalyst for new ways of thinking, creating, and communicating. We encourage candidates to embrace an AI mindset, one that’s curious, adaptive, and ready to explore what’s possible. We welcome thoughtful use of AI to expand your perspective and elevate how you share your story, while ensuring your application remains rooted in your own background, judgment, and voice. About Us CDW is a Fortune 500 technology solutions provider that helps businesses, government, education, and healthcare organizations achieve what’s possible through technology. What makes CDW different isn’t just what we do—it’s how we do it. At CDW we act as one—building trust, speaking candidly, and working together to achieve more. We play to win—focusing on what matters most and delivering for our customers. And we think forward—staying curious, moving fast, and continuously learning. We believe meaningful work happens when people feel supported, heard, and empowered to contribute. That’s why we think of ourselves as coworkers, not just employees—working together to solve complex challenges and deliver real impact for our customers and communities. As a full‑stack, full‑lifecycle technology partner, CDW brings deep expertise, strong relationships, and broad industry knowledge to help turn ideas into outcomes. When you join CDW, you become part of a collaborative environment where your work matters, your growth is supported, and your contributions help shape what’s next. Together, we deliver the full promise of what technology can do. Together, we Make Amazing Happen. CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.

What you’ll do

You will act as a senior trusted advisor to executive stakeholders, leading complex cyber risk advisory engagements and defining client vision. Additionally, you will oversee GRC services, develop intellectual property, and mentor consultants to support the growth of the Cyber Risk practice.

Requirements

Candidates must have 10+ years of experience in cyber risk, information security, or related advisory roles with strong knowledge of security frameworks like ISO 27001 and NIST. You are required to hold three or more relevant professional designations such as CISSP, CISM, or CRISC and possess excellent executive communication skills.

Listed skills

• Executive Advisory · Preferred
• Policy development · Preferred
• Compliance · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cyber risk
• Information security
• Privacy
• GRC consulting
• Executive advisory
• Risk assessment
• Governance
• Compliance
• AI governance
• Strategic planning
• Stakeholder management
• Security frameworks
• Remediation planning
• Policy development
• Thought leadership
• Mentoring
• Process Improvement
• ITIL 4
• Operational Resilience
• Mentorship
• Presentations
• Communication
• Planning
• Templates
• Management
• Coordinating
• Tooling
• Business Acumen
• Microsoft Visio
• Curiosity
• Leadership
• Decision Making
• Microsoft PowerPoint
• Microsoft Excel
• Financial Services
• Responsible AI
• Microsoft Outlook
• Microsoft Office
• Consulting
• Cloud Security
• Coaching
• Accountability
• Information Privacy
• Solution Architecture
• Sales
• Auditing
• Technology Solutions
• Business Objectives
• Creativity
• Advising

Job areas

• Security & Safety
• Consulting
• Technology
• Management & Leadership
• Cyber Risk Manager
• Chief Information Security Officer
• Information and Communications Technology Service Managers
• Computer and Information Systems Managers

More jobs from CDW