Cybersecurity ISO Senior Associate

Ranked among the largest accounting and consulting firms in the country and consistently recognized as a Great Place to Work, Cherry Bekaert delivers innovative advisory, assurance and tax services to our clients. At Cherry Bekaert we create shared success through teamwork, energy, and expertise. We approach today’s toughest business challenges with a client-first mindset, working together to create exceptional value. We are all committed to making a difference for our people, our clients, our community, and our professions. To meet this commitment, Cherry Bekaert will provide you with the space to pursue growth and development opportunities that will guide and support you at each stage of your personal and professional journey.

 

In support of our growing Information Assurance & Cybersecurity Solutions practice, we have an excellent opportunity for a certified ISO Lead Auditor demonstrating significant experience working in a professional services firm or within corporate GRC, Internal Audit, Cybersecurity, or Compliance teams to join us as a Senior Associate in either our Atlanta, GA, Raleigh, NC, Tysons, VA, or Chicago, IL office, with hybrid flexibility available consistent with delivery needs. In addition to being an early leader in building our ISO readiness and future certification capabilities, our IA/Cyber team provides, and you will be working significantly across a variety of consulting, governance, readiness assessments, risk management, and attestation/certifications services for clients with the following areas of focus:

• SOC 1/2/3
• CMMC
• FedRAMP, StateRAMP, TXRAMP
• NIST (NIST CSF, NIST 800-171, NIST 800-53)
• HIPAA
• HITRUST

 

If you are an active learner with a growth mindset, good at managing clients and projects, want to be part of a growing team, use your existing knowledge sets and teach others, let's have a conversation.

 

What your days look like:

Senior Associates support the delivery of consulting and attestation services.  As a Senior Associate you will help understand client needs, identify and document control environments, identify design or operating effectiveness gaps, vulnerabilities, audit exceptions and develop recommendations to management.  Skill sets desired include the ability to:

 

• Ensure effective project delivery, including quality control and oversight supervision, assisting with adequate planning, execution, and direction to manage to budget and to quality
• Identify areas to improve project delivery (process improvement)
• Regarding attestation and certification services delivery, support the development of strong work papers in conformance with the firm’s methodology/standards and participation in report drafting

• Maintain a strong client focus by understanding the client’s business needs while developing productive working relationships with client personnel to accomplish project objectives
• Multi-task across multiple clients and compliance standards, while still maintaining appropriate attention to detail
• Work with (lead, teach, support, and communicate) offshore resources to deliver projects 
• Utilize your experiences to teach others in the practice on new approaches, execution strategies, compliance standards, etc.

 

What you need for this role: 

• Bachelor’s Degree, preferably in Information Security, Information Systems, Computer Science, Cybersecurity or Accounting
• ISO 27001 or 42001 Lead Auditor certification is required; additional relevant certifications (CISSP, CMMC CCP or CCA, HiTRUST, or Cloud Security Certification from Google/AWS/Azure) are nice to have
• Minimum 2+ years of experience with performing ISO Certification audits and/or consulting externally or leading internally controls implementation or attestation services for SOC, CMMC, FedRAMP, ISO and/or HiTRUST
• Willingness to learn and deliver, in a consulting and attestation services model, on compliance standards that you may have little to no experience with 
• Outstanding relationship management, written and verbal communication, as well as presentation skills
• Ability to travel to client sites as need, not expected to exceed 25%

 

What you can expect from us:

• Our shared values that foster inclusion and belonging including uncompromising integrity, collaboration, trust, and mutual respect
• The opportunity to innovate and do work that motivates and engages you
• A collaborative environment focused on enabling you to furth