Senior Associate, RAS

Responsibilities

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
• Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, and managing evidence uploads
• Serve as the first line of response for audit requests and gather information for Client Lead review
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Monitor and respond to client communications across Slack, Teams, and email
• Maintain project management tools with accurate task tracking across active engagements
• Stay current on emerging risks and evolving control practices

Requirements

• Bachelor's or Master's degree in IT, CIS, MIS, or a related field
• 3+ years of experience in IT Audit, Cybersecurity, or IT Risk Advisory
• Knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, or CMMC
• Familiarity with GRC solutions and technologies

Preferred Qualifications

• Certifications: CompTIA Security+, CISA, CISM, CISSP, or AWS Cloud Practitioner
• 5+ years of experience with prior management experience

About the Company

Riveron partners with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by their DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability.