Senior Associate – Cyber Security Advisory

About the role

Riveron’s Cyber Security Advisory team is seeking a Senior Associate to lead client engagements, build GRC and cybersecurity programs, and assess IT controls. You will work remotely with senior team members, guiding Associates and delivering high‑impact security solutions.

Key responsibilities

• Lead implementation of GRC/Cybersecurity programs aligned with frameworks such as SOC 2, ISO 27001, NIST, FedRAMP and CMMC.
• Assess design and operating effectiveness of IT General Controls (ITGC) and develop remediation roadmaps.
• Conduct incident‑response tabletop exercises and manage vendor risk reviews, including SOC 2 report analysis.
• Implement and manage GRC platforms (e.g., Drata, Vanta, Tugboat Logic) and support cloud‑configuration and access‑review projects.
• Coordinate project plans, track timelines and budgets, and communicate status updates to clients.

Required profile

• Bachelor’s or Master’s degree in IT, CIS, MIS or related field.
• 3+ years experience in IT audit, cybersecurity or risk advisory.
• Relevant certifications preferred (CISA, CISM, CISSP, AWS Cloud Practitioner).
• Strong knowledge of compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI‑DSS, NIST, FedRAMP, CMMC).

Required skills

• GRC platform implementation (Drata, Vanta, Tugboat Logic).
• IT General Controls (ITGC) assessment.
• Incident response planning and tabletop exercises.
• Vendor risk assessment and SOC 2 report analysis.
• Cloud security configuration (AWS).

What we offer

• Full‑time permanent role with comprehensive benefits (medical, dental, vision, 401(k) match, PTO).
• Remote work flexibility and opportunities for professional growth.