Your work may include cybersecurity program assessments for a healthcare system or financial institution, regulatory compliance support (e.g., NYDFS, HIPAA), incident response plan development and tabletop exercise facilitation, third-party risk reviews, cloud configuration reviews, and cybersecurity due diligence for private equity and corporate clients evaluating acquisition targets. GCRS delivers across four service lines: Cyber Risk Advisory: program maturity assessments (ISO 27001, NIST, CIS Controls), risk-based program prioritization, security and privacy governance, data privacy and cyber compliance (GDPR, CCPA, NYDFS, HIPAA, PCI-DSS), third-party risk, AI security assessments, and board reporting.