Cybersecurity Risk and Compliance Associate
Core
Support cybersecurity strategy delivery by managing risk assessments, compliance audits, and third-party risk for a global advisory firm.
Role type
Associate, cybersecurity risk and compliance
Builds
Audit-ready control documentation, security metrics dashboards, and third-party risk assessment playbooks
Domain
Professional services / Cybersecurity governance and compliance
Deliverable
dashboards & analysis
Required skills
Risk and controls assessment, audit coordination, third-party risk management, policy maintenance, data analysis, stakeholder collaboration
Preferred skills
ISO 27001, SOC 2, Cyber Essentials, NIST frameworks
Technologies
ISO 27001, SOC 2, Cyber Essentials, NIST
Responsibilities
Support risk and controls assessments including walkthroughs and gap analysis; Coordinate evidence for external audits (ISO 27001, SOC 2, Cyber Essentials); Maintain security policies, standards, and control descriptions; Track risk-treatment actions and validate closure; Support client security due diligence and third-party risk assessments; Contribute to cybersecurity roadmap delivery and operational risk support
Seniority
Associate, entry-to-mid level IC