Cyber Risk EOL_Consultant

Anticipated Contract End Date/Length: October 30, 2026
Work Set Up: Hybrid

Our client in the Information Technology and Services industry is looking for a Cyber Risk EOL Consultant to execute detailed risk assessments and analysis of End-of-Life (EOL) technologies. The role involves collecting and analyzing data on EOL systems, evaluating cyber risks using defined methodologies, and supporting the implementation of remediation plans. The consultant will perform hands-on evaluation of assets and vulnerabilities, maintain risk documentation, and collaborate closely with the Lead Consultant and various technology teams. Strong analytical skills, attention to detail, and a proactive approach to managing cyber risks across legacy technologies are essential.

What you will do:

• Perform in-depth cyber risk assessments for identified EOL systems and technologies following established methodology.
• Gather information on assets, including software, hardware, and applications that are end-of-life or end-of-support.
• Evaluate potential cyber threats, vulnerabilities, and business impacts for each asset.
• Document findings meticulously, describing likelihood, impact, and severity in the risk register.
• Apply the cyber risk rating methodology consistently across technologies and conduct quality assurance on risk assessments.
• Identify mitigation options, including upgrades, patches, segmentation, monitoring, or compensating controls.
• Support prioritization and remediation of risks by coordinating with technical teams and communicating risk details to application owners or engineers.
• Track progress of remediation activities and escalate blockers or delays to the Lead Consultant.
• Monitor risk treatment plans and ensure remediation steps are completed or on track.
• Prepare status updates and contribute to risk reports, highlighting resolved items, pending actions, and changes in risk posture.
• Engage with stakeholders to gather data, validate risk assumptions, and communicate technical findings clearly to technical and non-technical audiences.
• Contribute to process improvements, templates, and checklists to enhance risk assessment accuracy and efficiency.
• Build awareness of cybersecurity risks and best practices among project teams.