Senior Associate

What You Have

• Bachelor's and/or Master's degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
• Relevant certification preferred: CompTIA Security+, CISA, CISM, CISSP, or AWS Cloud Practitioner
• 3+ years of experience in an IT Audit, Cybersecurity, or IT Risk Advisory role (candidates with 5+ years and prior management experience are encouraged to apply)
• Demonstrated knowledge regarding implementation of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC
• Familiarity with GRC solutions, tools, and technologies

Who You Are

• You have a passion for developing and maintaining client relationships
• You get the job done and have fun doing it
• You communicate skillfully with a variety of audiences and can create compelling stories from data
• You thrive in an ever-changing, dynamic work environment
• You readily identify problems and instinctively look for solutions
• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events

What You'll Do

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
• Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, managing evidence uploads, inputting vendor and risk records, and maintaining policy assignments
• Serve as the first line of response for audit requests, drafting initial responses and gathering information before escalating to the Client Lead for review
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Take ownership of ad-hoc tasks such as SAQs, documentation, and one-off client requests, making a first attempt before seeking feedback
• Monitor and respond to client communications across Slack, Teams, and email, drafting proposed solutions rather than simply surfacing problems
• Contribute to client calls and weekly status updates, coordinating with delivery team members on expectations for external-facing communication
• Maintain the project management tool with accurate, up-to-date task tracking across all active engagements
• Stay current on emerging risks and evolving control practices
• Build and maintain strong industry relationships to support long-term business development