Senior Associate, RAS

The role

The Senior Associate will support the implementation of GRC and cybersecurity programs. This role involves assessing IT General Controls, executing remediation roadmaps, and performing IT risk assessments.

What you will do

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other frameworks
• Own day-to-day GRC platform operations
• Serve as the first line of response for audit requests
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Take ownership of ad-hoc tasks such as SAQs, documentation, and one-off client requests
• Monitor and respond to client communications across Slack, Teams, and email
• Contribute to client calls and weekly status updates
• Maintain the project management tool with accurate, up-to-date task tracking
• Stay current on emerging risks and evolving control practices
• Build and maintain strong industry relationships

Required qualifications

• Bachelor's and/or Master's degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
• 3+ years of experience in an IT Audit, Cybersecurity, or IT Risk Advisory role
• Demonstrated knowledge regarding implementation of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC
• Familiarity with GRC solutions, tools, and technologies

Nice to have

• CompTIA Security+
• CISA
• CISM
• CISSP
• AWS Cloud Practitioner
• 5+ years and prior management experience

Benefits

• medical, dental, and vision insurance
• 401(k) with company match
• PTO

About the company

Riveron partners with clients to solve complex finance challenges, guided by their DELTA values. Their entrepreneurial culture thrives on collaboration and delivering exceptional outcomes.