Lead client engagements implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
Conduct compliance readiness assessments and assist with external audits
Maintain day-to-day compliance, security, and privacy operations, including incident response tabletop exercises and formalizing response and notification procedures
Assist clients with key security and compliance initiatives, including risk assessments, business continuity planning, cloud configurations, user access reviews, and asset inventories
Implement and manage GRC platforms (e.g., Drata GRC platform, Vanta compliance automation platform, Tugboat Logic platform)
Perform vendor risk reviews, including analyzing SOC 2 reports and managing security questionnaires
Develop and maintain security policies and standard operating procedures (SOPs) across key domains
Coordinate project activities, set priorities, and track progress against timelines, budgets, and deliverables
Communicate regularly with clients to manage expectations and provide project status updates
Deliver clear written and verbal presentations, including recommendations for operational and financial improvements to executive stakeholders
Stay current on emerging risks and evolving control practices
Build and maintain strong industry relationships to support long-term business development

Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner
3+ years of experience in an IT Audit, Cybersecurity or IT Risk Advisory role
Demonstrated knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, CMMC
Familiarity with GRC solutions, tools, and technologies

Senior Associate, Cyber Security

Key skills