Associate - GRC/Cybersecurity

Responsibilities

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
• Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, and managing evidence uploads
• Serve as the first line of response for audit requests, drafting initial responses and gathering information
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Monitor and respond to client communications across Slack, Teams, and email
• Maintain project management tools with accurate, up-to-date task tracking

Requirements

• Bachelor's or Master's degree in IT, CIS, MIS, or a related field
• Minimum 1 year of experience in IT Audit, Cybersecurity, or IT Risk Advisory
• Knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, or CMMC
• Familiarity with GRC solutions and technologies

Preferred Qualifications

• CompTIA Security+ certification
• CISA certification
• AWS Cloud Practitioner certification

About the Company

Riveron partners with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by their DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability.