Associate - GRC/Cybersecurity

📋 Description

• Support cybersecurity programs aligned with SOC 2, ISO 27001, and privacy frameworks
• Own day-to-day GRC platform ops: monitor tests, track controls, manage evidence
• First-line response for audit requests; draft responses and gather information
• Assist with recurring tasks: User Access Reviews, risk assessments
• Handle ad-hoc tasks such as SAQs, documentation, and client requests
• Manage client communications and participate in weekly status updates

🎯 Requirements

• Bachelor's and/or Master's degree in IT, CIS, MIS, or related field
• Certifications preferred: CompTIA Security+, CISA, or AWS Cloud Practitioner
• Minimum 1 year of IT Audit, Cybersecurity, or IT Risk Advisory experience
• Knowledge of SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC
• Familiarity with GRC solutions, tools, and technologies
• Strong communication and client relationship skills

🎁 Benefits

• Medical, dental, and vision insurance
• 401(k) with company match
• Paid time off (PTO)
• Full-time roles eligible for benefits