Managing Director, Cyber Risk
Kroll · New York, NY · via manual_submit
🗓 Posted: not published by source · Found by agent: 2026-09-25 10:21
92%
match
—salary (not stated)
n/a
applicants
consideringstatus
Application documents
Score breakdown
| Component | Raw | Weight | Contribution | Evidence |
|---|---|---|---|---|
| keywords | 100.0% | 30 | 30.0 | cybersecuritycyber riskincident responsegovernanceregulatoryidentity managementrisk managementcomplianceinformation security |
| seniority | 100.0% | 25 | 25.0 | Managing Director |
| location | 100.0% | 20 | 20.0 | nyc-metronew york |
| salary | 50.0% | 15 | 7.5 | salary-not-stated |
| company | 100.0% | 10 | 10.0 | investmentprivate equity |
Telegram alerts
2026-09-25T14:22:15+00:00 → chat 5272237815 · sent
Synthesis sent: Kroll is hiring a Managing Director to build and lead its Cybersecurity Advisory practice focused on private equity clients, handling deal diligence, portfolio value creation, and business development. Role involves direct C-suite engagement with PE sponsors and portfolio company leadership, plus practice/team management; reporting line not specified. Full-time, on-site in NYC.
full message
Resume customization
Variant Lucian_Lipinsky_CV__JPMC__2026.docx engine claude 9737 in / 5343 out tokens ✓ 10/10 review passed
⬇ Download tailored resume (.docx) · 📝 What changed (changelog)
Keywords injected / gaps: advisoryconsultingboardregulatory engagementtransactionrisk managementresilienceexecutive leadership
10-pass quality review
| # | Pass | Status | Detail |
|---|---|---|---|
| 1 | Grammar | APPROVED | Grammar consistent and correct throughout; no new errors introduced. |
| 2 | Spelling | APPROVED | No new misspellings; inherited quirks unchanged from base. |
| 3 | Formatting consistency | APPROVED | 1 font(s), 5 size(s), consistent bullets |
| 4 | Logical layout | APPROVED | Section order mirrors base logically; no orphaned sections. |
| 5 | LLM-artifact detection | APPROVED | no em dashes or LLM filler phrases detected |
| 6 | Job-description alignment | APPROVED | Advisory, board, regulatory terms align naturally with Kroll posting focus. |
| 7 | Accomplishments emphasis | APPROVED | Key metrics (45 countries, $1.7T AUM, tokenized fund) retained and emphasized. |
| 8 | No fabrication | APPROVED | No new employers, titles, degrees, certs, metrics, or dates added. |
| 9 | Consistency with base CV | APPROVED | All roles, dates, and facts match base resume without contradiction. |
| 10 | Human readability | APPROVED | Reads naturally as human-written, though slightly dense phrasing in places. |
Text preview
Lucian Lipinsky de Orlov lucian@lipinskyllc.com ▪ 914-656-0324 ▪ linkedin.com/in/lipinsky/ Senior cyber risk executive | advisory practice leadership Cybersecurity advisory & consulting | C-suite & board engagement M&A cyber due diligence & transaction advisory | practice building & thought leadership Senior cybersecurity and risk executive with 20+ years across global financial institutions, asset managers, and advisory consulting. Built and led cyber advisory practices with direct business-development and P&L responsibility, and ran cybersecurity due diligence on buy- and sell-side deals that shaped how investors saw risk, price, and post-close priorities. Trusted advisor to CEOs, boards, and regulators on cyber risk, resilience, and complex financial products, including the world's first SEC-approved tokenized government money fund. Builds high-performing teams, wins and runs client engagements, and turns technical risk into decisions investors and executives can act on. Professional Experience Highlights American Express - New York, NY Senior Director, Risk & Information Security 2025 - Present Cybersecurity Technology & Resiliency Risk Oversight Senior Director within American Express' global cyber risk oversight organization, leading a distributed team focused on data security, privacy, and identity & access management (IAM). Lead global cyber risk oversight for data protection, privacy, and identity security across enterprise platforms, cloud environments, and third-party ecosystems. Advise senior executives on cyber risk exposure, control effectiveness, and practical risk-reduction actions impacting customers, employees, and business operations. Give executives and business leaders a clear read on cyber, privacy, and identity risk, and the specific actions that reduce it. Partner with technology, legal, privacy, and business leadership to align cyber risk posture with regulatory expectations and business objectives. Lead, coach, and set delivery standards for a global team of senior cyber risk professionals, building talent and consistent advisory methodology across the group. Citigroup - New York, NY Senior Vice President, Cyber Operational Risk Officer 2023 - 2025 Senior cyber risk leader within Citi's Second Line of Defense providing independent challenge and advisory oversight across vulnerability management, incident response, threat intelligence, security operations, and policy governance. Advised senior leadership on cyber risk exposure, residual risk, and prioritization across global financial services operations. Turned technical findings into concise decision briefs for senior leadership and the board. Acted as primary liaison with global regulators on cybersecurity posture, resilience, and remediation strategy, translating regulatory expectations into practical program actions. Oversaw global adversarial emulation exercises with focus on preparedness, judgment, and executive response readiness. Reviewed and modernized cybersecurity policies, standards, and guidelines to meet regulatory expectations. Franklin Templeton Investments - New York, NY Global Director of Security and Risk (CISO) 2019 - 2023 Advised UHNW individuals and family offices within Franklin Templeton's Fiduciary Trust subsidiary on personal and family office cybersecurity risks, including digital assets, privacy exposure, identity compromise, and secure handling of sensitive financial information. Held executive accountability for global cybersecurity and risk management across 45 countries supporting $1.7T AUM, leading a large, complex program at enterprise scale. Advised executive leadership on cyber risk tradeoffs, investment decisions, and incident preparedness. Led incident response planning, executive tabletop exercises, and crisis simulations. Served as architectural risk advisor on the world's first SEC-approved tokenized government money fund, assessing blockchain, cryptography, and operational risk to support a novel investment structure. QuSecure - San Mateo, CA Board Advisor (Quantum Security) 2020 - 2023 Provided technical guidance on post-quantum cryptography architecture and applicability in regulated financial services environments. Translated complex quantum and cryptographic concepts into clear, credible narratives for executive leadership, potential investors, and media. Citihub - New York, NY Partner, CISO-for-Hire 2008 - 2015 Founded and led a cybersecurity advisory practice (CISO-for-Hire), owning business development, engagement delivery, and practice P&L across financial services and other regulated industries. Built C-suite and board relationships, and originated, scoped, and closed advisory engagements while serving as executive sponsor on key accounts. Led buy- and sell-side cybersecurity due diligence, assessing target security maturity, regulatory exposure, and operational resilience, and advising on risks affecting valuation, deal structure, and post-close remediation. Established the practice's service offerings, delivery methodology, and standards, and built and mentored the engagement teams that delivered them. Deloitte Consulting - New York, NY Senior Manager, Security SME 2003 - 2008 Delivered cybersecurity and technology-risk consulting to capital markets, wealth management, and retail banking clients as part of a Big Four advisory practice. Led large-scale regulatory and security transformation programs and presented risk findings and recommendations to client executives and boards. Shaped engagement methodology and developed junior consultants as the security practice grew. Thought Leadership & Education Fordham University - Three Minute Thesis (3MT) Competition First Place Winner (2018) Recognized for delivering advanced cybersecurity research on AI-driven threat detection to a non-technical audience in under three minutes, demonstrating exceptional clarity, discipline, and executive communication. Fordham University - Lincoln Center, New York, NY Adjunct Professor, Center for Cybersecurity 2019 - Present Teach undergraduate and graduate courses in computer security systems, encryption, operating system vulnerabilities, and disaster recovery. Program designated by NSA/DHS as a National Center of Academic Excellence in Cyber Defense Education. Education MS in Cybersecurity Fordham University, Graduate School of Arts and Sciences, New York, NY NSA and DHS National Center of Academic Excellence in Cyber Defense Education Certified MS in Advanced Technology, Specialization in Computer Science Thomas J. Watson School of Engineering, Applied Science, and Technology Graduated School of State University of New York, Binghamton, NY BS in Computer Science State University of New York, Binghamton, NY Certification & Training ISACA CRISC - PMI Project Management Professional (PMP) - ITIL Foundation Certified - Certified Disciplined Agilist - Enterprise Lean Six Sigma Green Belt - CISSP (Candidate) - IBM Certified Professional - Project Management - New York State Notary Public
Full description (4747 chars)
Open source posting ↗We are seeking a Managing Director to lead and expand our Cybersecurity Advisory practice serving the Private Equity (PE) sector. This executive will be responsible for driving growth, developing trusted relationships with PE sponsors and portfolio company executives, and delivering strategic cybersecurity advisory services that enhance investment outcomes and enterprise value. The Managing Director will work directly with private equity firms, operating partners, deal teams, boards, and portfolio company leadership to assess cyber risk, identify value creation opportunities, support transactions, and build resilient cybersecurity programs. This role combines business development, client leadership, thought leadership, and practice management responsibilities. The ideal candidate brings deep expertise in cybersecurity strategy and risk management, a strong network within the private equity ecosystem, and a proven track record of leading high-performing consulting teams and generating significant annual revenue. KEY RESPONSIBILITIES Business Development & Client Leadership - Develop and execute the firm's Private Equity Cybersecurity Advisory growth strategy. - Build and maintain C-suite and executive-level relationships with private equity sponsors, operating partners, investment professionals, and portfolio company leadership teams. - Originate, qualify, and close new advisory engagements across the PE lifecycle. - Serve as the executive sponsor for strategic client relationships and key accounts. - Achieve individual and practice revenue, profitability, and growth objectives. - Identify opportunities to cross-sell broader risk, technology, operational, and value creation advisory services. Transaction Advisory - Lead cybersecurity diligence engagements for buy-side and sell-side transactions. - Advise investors on cyber risks that may impact valuation, deal structure, integration strategy, or post-close investments. - Assess cybersecurity maturity, regulatory exposure, technology risks, and operational resilience of prospective acquisition targets. - Deliver actionable recommendations that enable informed investment decisions and accelerated value creation. Portfolio Value Creation - Partner with PE sponsors and portfolio company executives to develop cyber transformation and risk reduction roadmaps. - Design and oversee cybersecurity improvement programs that support growth, scalability, and exit readiness. - Guide executives in strengthening cyber governance, third-party risk management, incident response, cloud security, identity management, and regulatory compliance. - Advise boards and management teams on cybersecurity strategy and enterprise risk. Practice Leadership - Build, lead, and mentor a team of cybersecurity consultants and engagement leaders. - Establish methodologies, service offerings, intellectual property, and delivery standards. - Drive recruitment, talent development, and succession planning initiatives. - Contribute to overall firm strategy and participate as a senior member of the leadership team. Thought Leadership - Represent the firm in industry conferences, private equity events, and executive forums. - Publish insights on cybersecurity trends, transaction-related cyber risks, and emerging threats affecting PE-backed organizations. - Develop market-facing content that strengthens the firm's brand and market presence. QUALIFICATIONS - Bachelor's degree in information security, Computer Science, Business, Engineering, or related field. - 15+ years of progressive experience in cybersecurity consulting, advisory services, risk management, or related fields. - 7+ years serving private equity firms, investment organizations, or PE-backed portfolio companies. - Established network within private equity firms, operating partner communities, investment bankers, and PE-backed portfolio companies. - Experience at a leading consulting firm, cybersecurity advisory practice, Big Four firm, or specialized PE advisory organization. - Demonstrated success generating and managing a significant consulting revenue portfolio. - Deep understanding of cybersecurity strategy, risk management, governance, cloud security, resilience, and regulatory compliance. - Experience leading cybersecurity due diligence and post-acquisition value creation initiatives. - Strong executive presence with the ability to influence boards, investors, and C-suite stakeholders. - Industry certifications such as CISSP, CISM, CRISC, CISA, or equivalent. - Proven experience leading large consulting teams and complex client engagements. Employment type: Full-time. On-site. Reposted 22 hours ago; 54 people clicked apply. Responses managed off LinkedIn (promoted by hirer).