About the Role
The Senior Associate leads incident response and recovery engagements end to end, including scoping, workstream direction, client and counsel management, and delivery quality. This role requires owning matters from intake through final report, directing consultant teams during active response, and contributing to practice growth through relationship development and reusable methodology. The ideal candidate can represent findings credibly to executives, boards, counsel, and carriers.
Responsibilities
- Lead multiple concurrent incident response, forensic investigation, and recovery engagements, owning scope, budget, staffing, and delivery quality.
- Direct technical workstreams across containment, forensics, identity remediation, and infrastructure recovery, setting priorities and unblocking consultant teams.
- Develop evidence-based scoping and level-of-effort models for fixed-price recovery engagements, sequenced by client business priority.
- Serve as primary point of contact for client executives, outside counsel, and insurance carrier representatives throughout active matters.
- Own final written work product: investigation reports, executive briefings, insurance guidance memoranda, and remediation roadmaps.
- Review and quality-control consultant deliverables for technical accuracy and defensibility.
- Mentor and develop consulting associates and associates, including structured feedback and engagement-level coaching.
- Contribute to practice development: methodology and playbook standardization, reusable engagement IP, service line definition, and thought leadership.
- Support business development through carrier and law firm relationship management, proposal development, and scoping calls for inbound matters.
Requirements
- 5-7+ years in cybersecurity incident response, digital forensics, or enterprise recovery, including 3+ years leading engagements or teams.
- Track record leading large-scale ransomware recovery or complex intrusion matters in enterprise environments (thousands of endpoints, multi-site).
- Strong command of hybrid Microsoft identity architecture (Active Directory, Entra ID, Conditional Access, privileged access models) at a level sufficient to direct and validate technical work.
- Experience working under legal privilege and managing the counsel and carrier dynamics of breach response.
- Demonstrated ability to scope and price engagements accurately, and to manage delivery to fixed-price commitments.
- Executive-grade written and verbal communication; comfortable briefing boards, GCs, and CISOs.
Skills
- Cybersecurity incident response
- Digital forensics
- Enterprise recovery
- Ransomware recovery
- Complex intrusion matters
- Microsoft identity architecture (Active Directory, Entra ID, Conditional Access, privileged access models)
- Legal privilege
- Counsel and carrier dynamics
- Scoping and pricing engagements
- Written communication
- Verbal communication
Location
- Canada
Work Type
- Hybrid
Experience Level
- Senior Associate
- 5-7+ years experience
- 3+ years leading engagements or teams
Education Level
- Advanced degree in a relevant field a plus
Salary/Compensations
- CAD$140,000 – $190,000
- May be eligible for additional bonus incentive compensation
Benefits
- Comprehensive total rewards program
- Superior benefits package
- Wellness programming to support physical, mental, emotional and financial well-being
- In-house immigration support for foreign nationals and international business travelers
- Extended medical, dental, and vision insurance
- ERP with employer contribution
- TFSP
- RESP
- Life and disability insurance
- Paid time off (vacation, sick leave, holidays)
- Paid parental leave
- Wellness programs and employee assistance resources
- Commuter benefits
About the Company
- CRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations.
- Our two main services – economic and management consulting – are delivered by practice groups that focus on specific areas of expertise or industries.
Equal Opportunity
- Charles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.
