Senior Associate, RAS

About the role

The Sr Associate level position for Riveron's CSA group will work collaboratively with delivery team members who provide guidance, coaching, and direction. The role includes supporting the implementation of GRC/Cybersecurity programs, assessing the design and operating effectiveness of IT General Controls (ITGC), developing and executing remediation roadmaps, incident response, completing vendor reviews, and performing IT risk assessments.

What you'll do

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
• Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, managing evidence uploads, inputting vendor and risk records
• Serve as the first line of response for audit requests, drafting initial responses and gathering information before escalating to the Client Lead for review
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Take ownership of ad-hoc tasks such as SAQs, documentation, and one-off client requests, making a first attempt before seeking feedback

What you need

• 5–9 yrs of experience
• ISO 27001
• Compliance
• Incident response
• Test automation
• MIS reporting
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISA
• CISM
• CISSP
• AWS