Cyber Security - Senior Associate

Runs day-to-day delivery on governance, risk and compliance engagements for Riveron's Cyber Security Advisory practice, managing project plans, reviewing staff work, updating clients and mentoring associates. The senior associate leads client programs aligned to SOC 2, ISO 27001 and similar frameworks, performs readiness assessments and supports external audits, tests IT general controls, runs incident response tabletop exercises, handles risk assessments, access reviews and vendor reviews, implements GRC platforms such as Drata and Vanta, and writes security policies.

Riveron wants three or more years in IT audit, cybersecurity or IT risk advisory, knowledge of frameworks including NIST, HIPAA, PCI-DSS and CMMC, and ideally CISA, CISM or CISSP. Remote in the US with client travel.