Senior Associate, RAS

Riveron; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Riveron is seeking a Sr Associate for its Cyber Security Advisory (CSA) group in Bengaluru. You will work with delivery teams to implement GRC and cybersecurity programs, assess ITGC design, and develop remediation roadmaps.

You'll lead tasks across audit requests, risk assessments, and control testing, while staying current on evolving practices. This role emphasizes client relationships and collaboration within a fast-paced environment.

Qualifications

• Bachelor's and/or Master's degree in IT, CIS, MIS, or related field.
• Relevant certifications: CompTIA Security+, CISA, CISM, CISSP, or AWS Cloud Practitioner.
• 3+ years in IT Audit, Cybersecurity, or IT Risk Advisory (5+ years with management encouraged).
• Familiarity with SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC.

Responsibilities

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security/privacy frameworks.
• Own day-to-day GRC platform operations, including monitoring testing results, tracking controls, evidence uploads, vendor and risk records, and policy assignments.
• Serve as first line of response for audit requests, drafting initial responses and gathering information.
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments.
• Take ownership of ad-hoc tasks such as SAQs, documentation, and client requests, first attempt before feedback.
• Monitor client communications across Slack, Teams, and email, drafting proposed solutions.
• Contribute to client calls and weekly status updates, coordinating with delivery team for external-facing communication.
• Maintain the project management tool with up-to-date task tracking across all active engagements.
• Stay current on emerging risks and evolving control practices.
• Build and maintain industry relationships to support long-term business development.

Skills

GRC knowledge

Cybersecurity awareness

Client relationship skills

Education

Bachelor's/Master's in IT/CIS/MIS or related field

Tools

GRC tools

Job description

In today's dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.

Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment.

The Sr Associate level position for Riveron's CSA group will work collaboratively with delivery team members who provide guidance, coaching, and direction. The role includes supporting the implementation of GRC/Cybersecurity programs, assessing the design and operating effectiveness of IT General Controls (ITGC), developing and executing remediation roadmaps, incident response, completing vendor reviews, and performing IT risk assessments.

What You Have

• Bachelor's and/or Master's degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
• Relevant certification preferred: CompTIA Security+, CISA, CISM, CISSP, or AWS Cloud Practitioner
• 3+ years of experience in an IT Audit, Cybersecurity, or IT Risk Advisory role (candidates with 5+ years and prior management experience are encouraged to apply)
• Demonstrated knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, FedRAMP, and CMMC
• Familiarity with GRC solutions, tools, and technologies

Who You Are

• You have a passion for developing and maintaining client relationships
• You get the job done and have fun doing it
• You communicate skillfully with a variety of audiences and can create compelling stories from data
• You thrive in an ever-changing, dynamic work environment
• You readily identify problems and instinctively look for solutions
• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events

What You'll Do

• Support delivery team in implementing cybersecurity programs aligned with SOC 2, ISO 27001, and other security and privacy frameworks
• Own day-to-day GRC platform operations, including monitoring automated testing results, tracking controls, managing evidence uploads, inputting vendor and risk records, and maintaining policy assignments
• Serve as the first line of response for audit requests, drafting initial responses and gathering information before escalating to the Client Lead for review
• Assist with recurring compliance tasks including User Access Reviews, IR/DR tabletop exercises, and Risk Assessments
• Take ownership of ad-hoc tasks such as SAQs, documentation, and one-off client requests, making a first attempt before seeking feedback
• Monitor and respond to client communications across Slack, Teams, and email, drafting proposed solutions rather than simply surfacing problems
• Contribute to client calls and weekly status updates, coordinating with delivery team members on expectations for external-facing communication
• Maintain the project management tool with accurate, up-to-date task tracking across all active engagements
• Stay current on emerging risks and evolving control practices
• Build and maintain strong industry relationships to support long-term business development

About Riveron:

At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office.

Check us out on social media: LinkedIn Glassdoor Instagram Facebook

Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law.

Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits.