Cyber Security Associate (Contract)

Hightower • Chicago, IL

3d • Hybrid

About The Position

Hightower is hiring a Cyber Security Associate to support its Cybersecurity team in protecting company information assets and strengthening its security posture. The role collaborates with cross-functional teams, managed service providers, vendors, and business stakeholders on cybersecurity risk management, third-party risk, governance, risk and compliance, investigations, incident response, security technology, and awareness efforts.

The associate conducts and documents cybersecurity and vendor risk assessments, monitors remediation and risk metrics, supports risk exception and acceptance processes, and participates in security reviews of new technologies, applications, cloud services, and business initiatives. The role also supports vendor due diligence and ongoing monitoring, audits and compliance initiatives, policy and governance maintenance, management reporting, security investigations and incident response, security-tool deployment and maintenance, and employee security awareness training.

The position is in office Monday through Thursday and remote on Friday. The contract is expected to last approximately six months, with a rate of up to $30 per hour.

Requirements

• Bachelor’s degree and Security+ or a related certification.
• 1–2 years of experience in cybersecurity risk management, third-party risk management, security operations, or a related cybersecurity function.
• Ability to stay informed about emerging cybersecurity trends and threats.
• Ability to collect, analyze, and interpret security, risk, and compliance data.
• Strong written and oral interpersonal and communication skills.
• Self-motivated and able to operate with minimal supervision.
• Critical-thinking skills to address and resolve IT security issues.
• Strong organizational and project management skills, including the ability to track multiple risk, remediation, and compliance initiatives simultaneously.
• Knowledge of cybersecurity frameworks, standards, and regulatory requirements, including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOC 2, GLBA, SEC and FINRA regulations, and applicable privacy and information security requirements.

Nice To Haves

• Experience in financial services, wealth management, or another regulated industry.

Responsibilities

• Conduct and document cybersecurity risk assessments and track mitigation efforts through remediation or formal risk acceptance.
• Monitor remediation activities and collaborate with stakeholders to ensure identified risks are addressed promptly.
• Assist with risk exception and risk acceptance processes, including documentation and management approvals.
• Monitor cybersecurity risk metrics and key performance indicators and prepare reports for management and leadership.
• Collaborate with cross-functional teams to promote effective cybersecurity risk management.
• Participate in security reviews of new technologies, applications, cloud services, and business initiatives.
• Conduct third-party and vendor cybersecurity risk assessments.
• Support vendor due diligence, onboarding reviews, periodic reassessments, and ongoing risk monitoring.
• Evaluate vendor security documentation, including SOC reports, security questionnaires, penetration testing results, and other assurance artifacts.
• Work with internal stakeholders and external vendors to track remediation of identified security gaps and risks.
• Coordinate with managed service providers, cloud vendors, and third parties to align their security practices with company objectives.
• Assist with developing, implementing, and maintaining cybersecurity policies, standards, procedures, and governance initiatives.
• Support internal and external audits by collecting evidence, coordinating stakeholder responses, and tracking corrective actions.
• Help ensure compliance with applicable regulatory requirements, industry standards, and cybersecurity frameworks.
• Prepare reports, dashboards, and presentations on cybersecurity risk, compliance, and third-party risk activities.
• Investigate suspicious activities and security alerts or incidents, collaborate with relevant teams, and provide detailed reports.
• Coordinate efforts to contain, mitigate, and resolve threats affecting critical systems and data.
• Escalate security issues to senior team members when necessary.
• Support deployment, configuration, and maintenance of security tools and technologies.
• Support security awareness training and promote cybersecurity best practices among employees.

What This Job Offers

• Career Level: Entry Level