Cybersecurity & Information Risk Entry Level Risk 2026
About The Position
Growth in our Cybersecurity and Information Risk practice has created an opportunity for an Entry Level Analyst in Buffalo, NY or Rochester, NY to join our team. This role is ideal for recent graduates or early‑career professionals who are interested in building a foundation in cybersecurity, information risk, and advisory services while working alongside experienced professionals in a collaborative environment. The Analyst will support a variety of client engagements across industries including technology, healthcare, and financial services, and will gain exposure to cybersecurity strategy, risk management, and regulatory compliance.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Accounting, Internal Audit or a related field
- Interest in pursuing professional certifications such as CIA, CPA, CISA, CISSA, CEH, OSCP, CompTIA PenTest+, GPEN, CSTA
- GPA 3.3 or higher
- Strong written and verbal communication skills with presentation experience
- Foundational knowledge of cybersecurity controls, regulations, and standards
- Familiarity with COSO, SOX internal control requirements and/or security frameworks published by NIST, ISO, or the PCI SSC
- Strong analytical, organizational, and problem‑solving skills
- Desire and ability to work in a collaborative, team‑oriented environment
- Client‑service mindset and willingness to learn
- Willingness and ability to travel periodically with a significant amount within the WNY region
Responsibilities
- Assisting with cybersecurity and information risk assessments and process walkthroughs
- Supporting the identification and documentation of security controls
- Obtaining, reviewing, and analyzing security‑related policies and procedures
- Helping evaluate the design and effectiveness of cybersecurity programs and controls
- Preparing workpapers that summarize findings, conclusions, and recommendations
- Supporting the identification and evaluation of cybersecurity and information risks and improvement opportunities
- Using technology‑based tools and methodologies to assist in assessing control effectiveness
- Learning and staying current on evolving cybersecurity threats, risks, and mitigation techniques
Benefits
- Competitive benefits package
- Bonus program (for eligible roles) based on individual and firm performance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
