Cyber Security - Manager

A manager in Riveron's Cyber Security Advisory practice, leading client engagements that build governance, risk and compliance and cybersecurity programmes, working remotely in the US. The practice helps organisations stand up programmes from scratch, prepare for frameworks, test internal controls, run co-sourced internal audit and assess IT and cyber risk.

The manager handles most day-to-day project management on each engagement: building plans, reviewing the work of associates and senior associates, mentoring them and reporting status to clients. Engagement work includes implementing programmes aligned with SOC 2, ISO 27001 and other frameworks, readiness assessments and external audit support, ITGC design and effectiveness testing, remediation roadmaps, incident response tabletop exercises and notification procedures, risk assessments, access reviews and asset inventories. The role also implements GRC platforms such as Drata, Vanta and Tugboat Logic, reviews vendors' SOC 2 reports and security questionnaires, writes policies, presents recommendations to executives, interviews candidates, and builds relationships that support new business.

Riveron asks for a degree in IT, CIS or MIS, five years in IT audit, cybersecurity or IT risk advisory, and working knowledge of SOC 2, ISO 27001, HIPAA, PCI DSS, NIST, FedRAMP and CMMC, along with familiarity with GRC tools. CISA, CISM, CISSP or AWS Cloud Practitioner is preferred.