3+ years of experience in an IT Audit, Cybersecurity, or IT Risk Advisory role (candidates with 5+ years and prior management experience are encouraged to apply)
Demonstrated knowledge regarding implementation of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC
Familiarity with GRC solutions, tools, and technologies
WHO YOU ARE
You have a passion for developing and maintaining client relationships
You get the job done and have fun doing it
You communicate skillfully with a variety of audiences and can create compelling stories from data
You thrive in an ever-changing, dynamic work environment
You readily identify problems and instinctively look for solutions
You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
WHAT YOU'LL DO
Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, managing evidence uploads, inputting vendor and risk records, and maintaining policy assignments
Serve as the first line of response for audit requests, drafting initial responses and gathering information before escalating to the Client Lead for review
Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
Take ownership of ad-hoc tasks such as SAQs, documentation, and one-off client requests, making a first attempt before seeking feedback
Monitor and respond to client communications across Slack, Teams, and email, drafting proposed solutions rather than simply surfacing problems
Contribute to client calls and weekly status updates, coordinating with delivery team members on expectations for external-facing communication
Maintain the project management tool with accurate, up-to-date task tracking across all active engagements
Stay current on emerging risks and evolving control practices
Build and maintain strong industry relationships to support long-term business development
About Riveron
At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office.
Want to stay connected with Riveron? Join our Talent Community https://jobs.ashbyhq.com/riveron/form/talent-community-form to learn more about our growing firm and be considered for future opportunities.
Check us out on social media
LinkedIn https://www.linkedin.com/company/riveron/life/culture/ Glassdoor https://www.glassdoor.com/Photos/Riveron-Office-Photos-E672242.htm Instagram https://www.instagram.com/riveronconsulting/ Facebook https://www.facebook.com/RiveronConsulting/
Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law.
Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits.
FRAUD ALERT
Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process.
ARTIFICIAL INTELLIGENCE (AI) TOOLS ARE USED TO SUPPORT THE HIRING PROCESS IN SCREENING, ASSESSING, AND/OR SELECTING APPLICANTS FOR THIS POSITION. THESE TOOLS ASSIST OUR RECRUITMENT TEAM BUT DO NOT REPLACE HUMAN JUDGMENT. FINAL HIRING DECISIONS ARE ULTIMATELY MADE BY HUMANS. IF YOU WOULD LIKE MORE INFORMATION ABOUT HOW YOUR DATA IS PROCESSED, PLEASE CONTACT US.
