Cyber Security - Senior Associate

Riveron

8d•$84,000 - $117,000

About The Position

Riveron's Cyber Security Advisory (CSA) services assist organizations in implementing robust governance, risk, and compliance practices. This includes building GRC/Cybersecurity programs from the ground up, ensuring framework readiness, designing and maintaining critical security domains, conducting managed internal controls testing and monitoring, providing co-sourced/outsourced internal audit, performing segregation of duties and access risk reviews, developing policies and procedures, managing enterprise risk, and conducting IT and cybersecurity risk assessments. The Senior Associate role involves collaborating with senior team members, providing guidance and direction, and managing day-to-day project activities. This includes developing project plans, reviewing staff work, updating clients, and mentoring Associates. Key responsibilities include leading GRC/Cybersecurity program implementations, assessing IT General Controls (ITGC), developing remediation roadmaps, directing incident response exercises, and performing IT risk assessments.

Requirements

Bachelor's and/or Master's degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
3+ years of experience in an IT Audit, Cybersecurity or IT Risk Advisory role
Demonstrated knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, CMMC
Familiarity with GRC solutions, tools, and technologies

Nice To Haves

Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner

Responsibilities

Lead client engagements implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
Conduct compliance readiness assessments and assist with external audits
Maintain day-to-day compliance, security, and privacy operations, including incident response tabletop exercises and formalizing response and notification procedures
Assist clients with key security and compliance initiatives, including risk assessments, business continuity planning, cloud configurations, user access reviews, and asset inventories
Implement and manage GRC platforms (e.g., Drata GRC platform, Vanta compliance automation platform, Tugboat Logic platform)
Perform vendor risk reviews, including analyzing SOC 2 reports and managing security questionnaires
Develop and maintain security policies and standard operating procedures (SOPs) across key domains
Coordinate project activities, set priorities, and track progress against timelines, budgets, and deliverables
Communicate regularly with clients to manage expectations and provide project status updates
Deliver clear written and verbal presentations, including recommendations for operational and financial improvements to executive stakeholders
Stay current on emerging risks and evolving control practices
Build and maintain strong industry relationships to support long-term business development