Cyber Compliance Associate — IT Controls & Due Diligence

BDO USA, Llp; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

BDO USA, LLP in New York seeks an Experienced Associate, Cyber to participate in compliance, security and technology consulting engagements, including IT Controls, IT Due-Diligence, IT Vendor Management, assessing business environments based on security frameworks such as PCI, NIST, ISO, and SOX, at the direction of the compliance and security engagement team leads.

This role will interact with client personnel, thus good communication skills and a strong presence are needed.

Qualifications

• High school diploma or GED, required.
• Bachelor’s degree with a focus in Computer Science, Information Security, Accounting, or Finance, preferred.

Responsibilities

• Engage client projects and consult on compliance and security issues, remediation and recommendations.
• Draft reports or presentations showing updates needed for compliance.
• Create initial project plans for client, participate in planning sessions and testing.
• Identify and prioritize risks; assess impact and likelihood.
• Review and document internal controls based on PCI, NIST, ISO and SOX.
• Evaluate observations and propose solutions aligned with client needs.
• Prepare client reports highlighting work performed and issues identified.
• Coordinate with other BDO practices on technical issues and due diligence components.
• Travel up to 30% as necessary.
• Other duties as required.

Skills

Verbal communication

Written communication

Issue identification

Analytical skills

Education

Bachelor’s degree in Computer Science, Information Security, Accounting or Finance

High school diploma or GED

Tools

Microsoft Office

Google Suite

Job description

BDO USA, LLP in New York seeks an Experienced Associate, Cyber to participate in compliance, security and technology consulting engagements, including IT Controls, IT Due-Diligence, IT Vendor Management, assessing business environments based on security frameworks such as PCI, NIST, ISO, and SOX, at the direction of the compliance and security engagement team leads.

This role will interact with client personnel, thus good communication skills and a strong presence are needed.