Senior Associate – Cybersecurity & GRC

About the role

Riveron is seeking a Senior Associate to join its Cyber Security Advisory team. You will work closely with delivery teams to design, implement, and monitor governance, risk and compliance programs for clients across multiple industries.

Key responsibilities

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks.
• Own day‑to‑day GRC platform operations, including monitoring automated testing results, tracking controls, managing evidence uploads, and maintaining policy assignments.
• Serve as the first line of response for audit requests, drafting initial responses and gathering information before escalation.
• Assist with recurring compliance tasks such as User Access Reviews, IR/DR tabletop exercises, and risk assessments.
• Handle ad‑hoc tasks like SAQs, documentation, and one‑off client requests while monitoring client communications via Slack, Teams, and email.

Required profile

• Bachelor’s or Master’s degree in IT, CIS, MIS or a related field.
• 3+ years of experience in IT audit, cybersecurity, or IT risk advisory (5+ years and prior management experience encouraged).
• Knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI‑DSS, NIST, FedRAMP, and CMMC.
• Passion for developing and maintaining client relationships and thriving in a dynamic environment.

Required skills

• Experience with GRC platforms and tools.
• Proficiency in assessing IT General Controls (ITGC) design and operating effectiveness.
• Relevant certifications preferred: CompTIA Security+, CISA, CISM, CISSP, AWS Cloud Practitioner.

What we offer

• Full‑time benefits including medical, dental, and vision insurance.
• 401(k) plan with company match.
• Paid time off (PTO).