Consulting - Associate

Description

Cybersecurity is set to become a $10 trillion criminal enterprise by 2025, outpacing the illegal drug trade and we are looking for a full-time (exempt) Security Practitioner looking to enrich their professional career. In this position, you will have the opportunity to impact one of the most important problems of our time with an elite team and firm.

As an Associate, you will play a crucial role in providing support and assistance to senior consultants and project teams. This position involves collaborating with clients, conducting research, analyzing data, and contributing to the development and implementation of solutions to meet client needs. From professional development, an Associate is focused on learning and delivering exceptional client service via the risk3sixty way.

At risk3sixty, we are employee-centric innovators that dream big, take calculated risks, and challenge the status-quo. It’s simple: we can’t accomplish our mission without diverse teams innovating and pushing together. Therefore, we prioritize giving all team members an opportunity to enrich and enlarge their careers through customized career planning and opportunities to participate in various management and leadership training programs to continuously thrive.

Core Responsibilities

1. Support the delivery of risk and technology around Governance, Risk, and Compliance (GRC) programs on time and within budget.
2. Understand and stay within the scope of projects.
3. Efficient walkthroughs and collection and testing of evidence.
4. Regularly interact with peers and clients as both an auditor and a consultant.
5. Provide timely, comprehensive, and accurate information and reports in both written and verbal communication.
6. Manage priorities and tasks on projects to achieve delivery of critical numbers.
7. Work in a fast-paced environment where no two weeks are the same.
8. Research industry-leading practices related to GRC.

Specific Benefits

1. Training/professional development budget for certifications.
2. Unlimited PTO.
3. Flexible Work Hours.
4. Paid Medical Benefits.
5. Certification exam reimbursement.

Requirements

Education and Experience

1. Bachelor's degree in computer science, business management, technology, or other relevant service area, or equivalent years of experience directly related.
2. Familiarity with risk3sixty’s services and relevant professional standards the duties and responsibilities specified.
3. Basic knowledge of cloud technology and security domains.
4. High level of attention to detail and quality work product.
5. Excellent time management, organizational, and verbal and written communication skills.
6. Ability to work on-site or remotely as a valuable contributor to a collaborative team.
7. Capable of simultaneously managing assigned tasks for multiple projects.
8. Proficient using Microsoft Word, Excel, and PowerPoint.
9. Prior direct information security exposure preferred in one of the following domains:
10. Governance (e.g., policy development, reporting to senior management).
11. Risk Management (e.g., risk identification, treatment, and project management).
12. Compliance (e.g., supporting operation of controls, internal audits, external audits).
13. Ability to manage and prioritize tasks and activities.
14. Must be open to constructive feedback and strive for continuous improvement.

Bonus:

1. Project Management experience.
2. Consulting/client-facing experience.
3. Understanding of security frameworks such as ISO 27001, ISO 27701, NIST 800-53.
4. Exposure to internal/external audits.
5. Entry-level security certifications (e.g., Security+, CCSK, AWS Cloud Practitioner).

Physical Requirements

1. Prolonged periods sitting at a desk and working on a computer.
2. Must be able to lift up to 10 pounds at times.