Senior Associate, RAS

📋 Description

• Implement cybersecurity programs aligned with SOC 2, ISO 27001, and other frameworks
• Own day-to-day GRC platform ops: monitoring tests, controls, evidence, and vendor/risk records
• First-line responses for audit requests; draft responses and gather information
• Assist with recurring tasks: User Access Reviews, IR/DR tabletop, Risk Assessments
• Ad-hoc tasks: SAQs, documentation, client requests
• Coordinate with delivery teams on external-facing communications

🎯 Requirements

• Bachelor's and/or Master's in IT/CIS/MIS or related field
• Certifications: CompTIA Security+, CISA, CISM, CISSP, or AWS Cloud Practitioner
• 3+ years IT Audit, Cybersecurity, or IT Risk Advisory
• 5+ years including management experience encouraged
• Knowledge of SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, CMMC
• Familiarity with GRC solutions, tools, and technologies
• Strong client relationships and communication skills

🎁 Benefits

• Flexible benefits and mentorship
• Medical, dental, and vision insurance
• 401(k) with company match
• PTO