Manager – Cyber Security Advisory (CSA)

About the role

Riveron partners with organisations to implement leading governance, risk and compliance practices. The Manager‑CSA will work collaboratively with senior team members to guide, coach and direct project delivery for cyber security advisory engagements. This role involves day‑to‑day project management, client communication and mentorship of junior staff.

Key responsibilities

• Lead client engagements to design and operationalise cybersecurity programs aligned with frameworks such as SOC 2 and ISO 27001.
• Conduct compliance readiness assessments, manage external audits and maintain ongoing security and privacy operations.
• Implement and manage GRC platforms (e.g., Drata, Vanta, Tugboat Logic) and perform vendor risk reviews.
• Develop security policies, SOPs and remediation roadmaps, and run incident‑response tabletop exercises.
• Coordinate project activities, track timelines and budgets, and communicate status updates to clients.

Required profile

• Bachelor’s or Master’s degree in IT, CIS, MIS or a related field.
• 5+ years of experience in IT audit, cybersecurity or IT risk advisory.
• Relevant certifications such as CISA, CISM, CISSP or AWS Cloud Practitioner preferred.
• Strong client‑relationship skills and ability to thrive in a dynamic environment.

Required skills

• Knowledge of compliance frameworks: SOC 2, ISO 27001, HIPAA, PCI‑DSS, NIST, FedRAMP, CMMC.
• Experience with GRC solutions and platforms (Drata, Vanta, Tugboat Logic).
• Cloud security expertise, particularly AWS.
• Risk assessment, business continuity planning and access‑review capabilities.

What we offer

• Full‑time benefits including medical, dental and vision insurance.
• 401(k) plan with company match.
• Paid time off and flexible work environment.