Senior Associate, Cyber Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee client interactions by implementing cybersecurity initiatives that comply with SOC 2, ISO 27001, and various other security and privacy frameworks.

• Execute compliance readiness assessments and provide support during external audit processes.

• Manage daily compliance, security, and privacy operations effectively.

• Lead incident response tabletop exercises and establish formal procedures for response and notification.

• Support clients in conducting risk assessments, planning for business continuity, configuring cloud environments, reviewing user access, and maintaining asset inventories.

• Implement and oversee Governance, Risk, and Compliance (GRC) platforms such as Drata, Vanta, and Tugboat Logic.

• Perform vendor risk assessments, evaluate SOC 2 reports, and handle security questionnaires.

• Create and maintain security policies and standard operating procedures across essential domains.

• Organize project tasks, prioritize objectives, and monitor progress against timelines, budgets, and deliverables.

• Regularly communicate with clients to manage expectations and provide updates on project status.

• Present both written and verbal recommendations for operational and financial enhancements to executive stakeholders.

• Keep abreast of emerging risks and advancements in control practices.

• Cultivate and sustain industry relationships to support long-term business growth.

• Offer guidance, coaching, and direction to senior team members and mentor Associates.

• Manage daily project activities, including developing project plans and reviewing staff work quality.

⛳️ Requirements

• A Bachelor's and/or Master’s degree in Information Technology, Computer Information Systems, Management Information Systems, or a related discipline.

• A minimum of 3 years of experience in IT Audit, Cybersecurity, or IT Risk Advisory roles.

• Proven knowledge of compliance frameworks including SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC.

• Familiarity with GRC solutions, tools, and technologies.

• Relevant certifications such as CISA, CISM, CISSP, or AWS Cloud Practitioner are preferred.

• Ability to develop and nurture client relationships.

• Proficient in communicating with diverse audiences and crafting compelling narratives from data.

• Capability to identify challenges and formulate effective solutions.

• Willingness to engage in community service, training, recruiting, and firm events.

• Must possess legal authorization to work in the United States.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Paid Time Off (PTO).

• Flexible work arrangements.

• Progressive benefits package.

• Mentorship opportunities.

• Meaningful chances for impactful work that supports well-being both in and out of the office.