Cyber Compliance Associate — IT Controls & Security Advisory

BDO USA, Llp; Nashville (TN); On-site; USD 85,000 - 115,000; Full time

Job summary

BDO USA, LLP is seeking an Experienced Associate, Cyber to participate in compliance, security and technology consulting engagements, including IT controls, IT due-diligence, and IT vendor management for client environments.

The role expects collaboration with engagement leads, effective communication, and the ability to translate security requirements into actionable recommendations. Travel up to 30% is required as part of client projects.

Qualifications

• Experience with compliance frameworks such as PCI, NIST, ISO, SOX.
• Experience in management consulting or technology advisory preferred.
• Strong written and verbal communication required.

Responsibilities

• Engage client projects and consult on compliance and security issues, remediation and recommendations.
• Draft reports or presentations to clients showing updates needed for compliance.
• Develop initial project plans and participate in planning sessions.
• Identify and prioritize risks; assess likelihood and impact.
• Review and document internal controls per PCI, NIST, ISO, SOX.
• Coordinate with other practices on technical issues and due diligence components.
• Travel up to 30% as necessary.
• Other duties as required.

Skills

Compliance frameworks

Communication skills

Analytical thinking

Client interaction

Education

Bachelor’s degree in Computer Science, Information Security, Accounting, or Finance

High school diploma or GED

Tools

Microsoft Office

Google Suite

Job description

BDO USA, LLP is seeking an Experienced Associate, Cyber to participate in compliance, security and technology consulting engagements, including IT controls, IT due-diligence, and IT vendor management for client environments.

The role expects collaboration with engagement leads, effective communication, and the ability to translate security requirements into actionable recommendations. Travel up to 30% is required as part of client projects.