Experienced Associate, Cyber

BDO USA, Llp; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

BDO USA, LLP in New York seeks an Experienced Associate, Cyber to participate in compliance, security and technology consulting engagements, including IT Controls, IT Due-Diligence, IT Vendor Management, assessing business environments based on security frameworks such as PCI, NIST, ISO, and SOX, at the direction of the compliance and security engagement team leads.

This role will interact with client personnel, thus good communication skills and a strong presence are needed.

Qualifications

• High school diploma or GED, required.
• Bachelor’s degree with a focus in Computer Science, Information Security, Accounting, or Finance, preferred.

Responsibilities

• Engage client projects and consult on compliance and security issues, remediation and recommendations.
• Draft reports or presentations showing updates needed for compliance.
• Create initial project plans for client, participate in planning sessions and testing.
• Identify and prioritize risks; assess impact and likelihood.
• Review and document internal controls based on PCI, NIST, ISO and SOX.
• Evaluate observations and propose solutions aligned with client needs.
• Prepare client reports highlighting work performed and issues identified.
• Coordinate with other BDO practices on technical issues and due diligence components.
• Travel up to 30% as necessary.
• Other duties as required.

Skills

Verbal communication

Written communication

Issue identification

Analytical skills

Education

Bachelor’s degree in Computer Science, Information Security, Accounting or Finance

High school diploma or GED

Tools

Microsoft Office

Google Suite

Job description

JOB DESCRIPTION

The Experienced Associate, Cyber is responsible to participate and assist in compliance, security and technology consulting related engagements, including, IT Controls, IT Due-Diligence, IT Vendor Management, assessing business environments based on security frameworks such as PCI, NIST, ISO, and SOX, at the direction of the compliance and security engagement team leads. This role will interact with client personnel, thus good communication skills and a strong presence are needed.

Job Summary

The Experienced Associate, Cyber is responsible to participate and assist in compliance, security and technology consulting related engagements, including, IT Controls, IT Due-Diligence, IT Vendor Management, assessing business environments based on security frameworks such as PCI, NIST, ISO, and SOX, at the direction of the compliance and security engagement team leads. This role will interact with client personnel, thus good communication skills and a strong presence are needed.

Job Duties

• Works with internal teams to directly engage client projects and consults around compliance and security issue, needs, remediation and make recommendations for resolution
• Drafts reports or presentations to client showing the updates needed to ensure their systems are operating for compliance
• Works with team on creating initial project plans for client, participating in planning sessions and attending meetings and testing for client projects
• Identifies and prioritizes risks and assesses the impact and likeliness of occurrence
• Participates in the review, validation, observation, and documentation of internal controls based on frameworks such as Payment Card Industry (PCI); National Institute of Standards and Technology (NIST); International Organization for Standardization (ISO) and Sarbanes-Oxley Act (SOX) IT standards
• Assists in evaluation of observations and providing possible solutions for and courses of action and to achieve best results based on the client business needs
• Prepares reports for client, highlighting work performed, issues identified and possible solutions/ recommendations
• Coordinates with other BDO practices in relation to technical issues and other due diligence project components in conjunction with the engagement lead
• Travels up to 30% of the time as necessary
• Other duties as required

Supervisory Responsibilities

• N/A

Education

• High school diploma or GED, required
• Bachelor’s degree with a focus in Computer Science, Information Security, Accounting, or Finance, preferred

Experience

• One (1) or more years’ experience working with any sort of compliance framework, required
• One (1) year of prior experience in management consulting, technology advisory, or technology project management, preferred
• Prior experience working within a national consulting organization or professional services, preferred

Software

• Proficient in the use of Microsoft Office Suite, required
• Experience with Google Suite, preferred

Other Knowledge, Skills & Abilities

• Excellent verbal and written communication skills
• Ability to identify issues and anomalies through review of supporting information