Cyber Risk Services interviews assess advisory presence, framework fluency (NIST CSF, ISO 27001, DORA) and client-facing maturity. Practice translating technical risk into board language.
Walk me through how you would structure a DORA readiness assessment for a Tier 1 UK bank in 8 weeks.
Frame: scope (which legal entities in-scope), workstreams (ICT risk mgmt, incident reporting, resilience testing, 3rd-party register, info sharing), gap analysis vs current RTS/ITS, prioritised remediation, governance ask. Close with a 1-slide CFO summary.
A client's CISO disagrees with your maturity rating. How do you handle it?
Acknowledge, separate evidence from interpretation, re-walk the scoring rubric with named artefacts, agree a delta workshop, escalate to the engagement partner only if blocked. Never relitigate in the steerco.
How would you quantify the financial impact of a ransomware event on a £2B retailer?
Use FAIR: loss event frequency × loss magnitude. Decompose magnitude into productivity loss, response cost, replacement, fines, reputation. Anchor with industry benchmarks (Sophos / Marsh). Show range, not point estimate.
Sell me Deloitte's MDR service.
Lead with outcome (MTTD, MTTR, analyst leverage), then differentiation (global SOC footprint, sector threat intel, integration with Strategic Risk), then commercial (retainer + outcome-based pricing). End with a customer reference pattern.
Tell me about a time you influenced a senior leader without authority.
STAR. Pick a story with quantified outcome, a named stakeholder, and a clear influencing tactic (data, narrative, coalition). Avoid stories where you 'just escalated'.
Manager and Senior Manager are the highest-volume openings. Director and Partner roles are sponsored hires with longer cycles.
No, but you must demonstrate structured thinking. Strong industry hires (ex-CISO, ex-Big-Tech) are common at Manager+.
Pivotal. A weak case round usually overrides a strong competency round.
No — this pack maps to Deloitte UK (Risk Advisory) but the structure is similar across NSE and the US.
Premium members get the full round structure, signals, and AI-graded practice.