Job description

In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment. The Senior Associate level position for Riveron’s CSA group will work collaboratively with senior team members and provide guidance, coaching, and direction. Senior Associates are expected to conduct the majority of day-to-day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and mentoring Associates. The role includes leading the implementation of GRC/Cybersecurity programs, assessing the design and operating effectiveness of IT General Controls (ITGC), developing and executing remediation roadmaps, directing incident response tabletop exercises, and performing IT risk assessments. What You Have: - Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field - Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner - 3+ years of experience in an IT Audit, Cybersecurity or IT Risk Advisory role - Demonstrated knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, CMMC - Familiarity with GRC solutions, tools, and technologies Who You Are: - You have a passion for developing and maintaining client relationships - You get the job done and have fun doing it - You communicate skillfully with a variety of audiences and can create compelling stories from data - You thrive in an ever-changing, dynamic work environment - You readily identify problems and instinctively look for solutions - You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events - You are willing and able to travel as needed to meet client and business needs, as travel is an expected part of this role. What You’ll Do: - Lead client engagements implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks - Conduct compliance readiness assessments and assist with external audits - Maintain day-to-day compliance, security, and privacy operations, including incident response tabletop exercises and formalizing response and notification procedures - Assist clients with key security and compliance initiatives, including risk assessments, business continuity planning, cloud configurations, user access reviews, and asset inventories - Implement and manage GRC platforms (e.g., Drata GRC platform, Vanta compliance automation platform, Tugboat Logic platform) - Perform vendor risk reviews, including analyzing SOC 2 reports and managing security questionnaires - Develop and maintain security policies and standard operating procedures (SOPs) across key domains - Coordinate project activities, set priorities, and track progress against timelines, budgets, and deliverables - Communicate regularly with clients to manage expectations and provide project status updates - Deliver clear written and verbal presentations, including recommendations for operational and financial improvements to executive stakeholders - Stay current on emerging risks and evolving control practices - Build and maintain strong industry relationships to support long-term business development Applications for this evergreen opportunity will be accepted through Dec 31, 2026. About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Want to stay connected with Riveron? Join our Talent Community jobs.ashbyhq.com to learn more about our growing firm and be considered for future opportunities. Check us out on social media: LinkedIn linkedin.com Glassdoor glassdoor.com Instagram instagram.com Facebook facebook.com Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at riveron.com. Contract roles are not eligible for benefits. FRAUD ALERT Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. ARTIFICIAL INTELLIGENCE (AI) TOOLS ARE USED TO SUPPORT THE HIRING PROCESS IN SCREENING, ASSESSING, AND/OR SELECTING APPLICANTS FOR THIS POSITION. THESE TOOLS ASSIST OUR RECRUITMENT TEAM BUT DO NOT REPLACE HUMAN JUDGMENT. FINAL HIRING DECISIONS ARE ULTIMATELY MADE BY HUMANS. IF YOU WOULD LIKE MORE INFORMATION ABOUT HOW YOUR DATA IS PROCESSED, PLEASE CONTACT US.

Requirements

Must-haves

Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
3+ years of experience in an IT Audit, Cybersecurity or IT Risk Advisory role
Demonstrated knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, CMMC
Familiarity with GRC solutions, tools, and technologies
You have a passion for developing and maintaining client relationships
You get the job done and have fun doing it
You communicate skillfully with a variety of audiences and can create compelling stories from data
You thrive in an ever-changing, dynamic work environment
You readily identify problems and instinctively look for solutions
You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
You are willing and able to travel as needed to meet client and business needs, as travel is an expected part of this role.
Lead client engagements implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
Conduct compliance readiness assessments and assist with external audits
Maintain day-to-day compliance, security, and privacy operations, including incident response tabletop exercises and formalizing response and notification procedures
Assist clients with key security and compliance initiatives, including risk assessments, business continuity planning, cloud configurations, user access reviews, and asset inventories
Implement and manage GRC platforms (e.g., Drata GRC platform, Vanta compliance automation platform, Tugboat Logic platform)
Perform vendor risk reviews, including analyzing SOC 2 reports and managing security questionnaires
Develop and maintain security policies and standard operating procedures (SOPs) across key domains
Coordinate project activities, set priorities, and track progress against timelines, budgets, and deliverables
Communicate regularly with clients to manage expectations and provide project status updates
Deliver clear written and verbal presentations, including recommendations for operational and financial improvements to executive stakeholders
Stay current on emerging risks and evolving control practices
Build and maintain strong industry relationships to support long-term business development

Nice-to-haves

Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsai

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto