Senior Associate, Cyber Security

Riveron

Cybersecurity advisory senior associate helping Riveron clients implement GRC and compliance programs. Leading IT risk assessments, audits, remediation, and client engagement delivery.

Posted 8/4/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $84,000 - $117,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other compliance frameworks, while effectively managing client relationships and leading project activities. Proficient in risk assessments, incident response, and maintaining security policies across various domains.

Highest-signal resume keywords

SOC 2 ComplianceISO 27001 ImplementationGRC Platform ManagementIT Audit ExperienceCISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity ProgramsCompliance AssessmentsRisk AssessmentsIncident ResponseSecurity Policies DevelopmentProject ManagementCloud ConfigurationsVendor Risk ReviewsData AnalysisBusiness Continuity Planning

Soft Skills

Skilled CommunicationClient Relationship ManagementProblem IdentificationMentoringTeam Leadership

Tools & Technologies

DrataVantaTugboat LogicGRC Solutions

Certifications & Qualifications

CISACISMCISSPAWS Cloud Practitioner

Industry Keywords

HIPAAPCI-DSSNISTFedRAMPCMMC

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Lead client engagements implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
Conduct compliance readiness assessments and assist with external audits
Maintain day-to-day compliance, security, and privacy operations
Direct incident response tabletop exercises and formalize response and notification procedures
Assist clients with risk assessments, business continuity planning, cloud configurations, user access reviews, and asset inventories
Implement and manage GRC platforms including Drata, Vanta, and Tugboat Logic
Perform vendor risk reviews, analyze SOC 2 reports, and manage security questionnaires
Develop and maintain security policies and standard operating procedures across key domains
Coordinate project activities, set priorities, and track progress against timelines, budgets, and deliverables
Communicate regularly with clients to manage expectations and provide project status updates
Deliver written and verbal presentations with recommendations for operational and financial improvements to executive stakeholders
Stay current on emerging risks and evolving control practices
Build and maintain industry relationships supporting long-term business development
Provide guidance, coaching, and direction to senior team members and mentor Associates
Conduct day-to-day project management, including project plan development and staff-work quality reviews

Requirements

What you’ll need

Bachelor's and/or Master’s degree in Information Technology, Computer Information Systems, Management Information Systems, or a related field
3+ years of experience in an IT Audit, Cybersecurity, or IT Risk Advisory role
Demonstrated knowledge of SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC compliance frameworks
Familiarity with GRC solutions, tools, and technologies
Relevant certification such as CISA, CISM, CISSP, or AWS Cloud Practitioner preferred
Ability to develop and maintain client relationships
Skilled communication with a variety of audiences and ability to create compelling stories from data
Ability to identify problems and develop solutions
Ability to participate in community service, training, recruiting, and firm events
Must be legally authorized to work in the United States

Benefits

Comp & perks

Medical, dental, and vision insurance
401(k) with company match
PTO
Flexible work arrangements
Progressive benefits
Mentorship
Meaningful opportunities for impactful work supporting well-being in and out of the office