Risk Cyber Internal Audit Senior Associate (Cybersecurity)

Location: New York, NY or Edison, NJ, United States; hybrid work with in-person attendance at least three days per week at a company office or client site. Travel to client locations may be required.

Base salary: $101,200–$129,030 annually.

Company

Professional services organization providing audit, tax, advisory, cybersecurity, and risk consulting services through a multinational platform.

What you will do

• Plan and execute cybersecurity internal audits, risk assessments, control testing, and capability assessments.
• Lead client walkthroughs, interviews, and workshops to evaluate security processes and technology environments.
• Conduct cybersecurity maturity assessments using NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, and HITRUST.
• Assess regulatory compliance across HIPAA, FedRAMP, GLBA, GDPR, PCI DSS, and state data-breach notification requirements.
• Document risks and control deficiencies, develop risk-based recommendations and mitigation roadmaps, and prepare client deliverables.
• Mentor junior team members, support project management and business development activities, and contribute across engagements from planning through reporting.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• At least 3 years of experience in cybersecurity, internal audit, or IT risk.
• Familiarity with NIST CSF, NIST 800-53, NIST 800-171, NIST AI RMF, CSA CCM, ISO/IEC 27001/27002, COBIT, HITRUST, HIPAA, FedRAMP, GLBA, and PCI DSS.
• Functional understanding of IT, cybersecurity, AI, cloud security, data protection, vulnerability management, incident response, and the cloud shared responsibility model.
• Clear oral and written communication skills, including the ability to present cybersecurity findings and recommendations to clients.
• Ability to manage multiple engagements and competing priorities in a fast-paced consulting environment.

Nice to have

• Master’s degree in a cybersecurity-related field.
• CISA, CISSP, or a similar professional certification.
• Experience serving clients at a consulting firm.

Culture & Benefits

• Hybrid work model with flexibility in work location, weekly schedule, and flex time off.
• Comprehensive benefits supporting employee well-being and different household needs.
• Work-life integration options and inclusion-focused workplace practices.
• Professional development activities and regular training.
• Potential discretionary annual bonus based on individual and firm performance.

Hiring process

• Selected applicants are contacted by a company representative to schedule an interview.