Hybrid Senior Cybersecurity Internal Audit Lead

Grant Thornton (US); New York (NY); Hybrid; USD 101,000 - 129,000; Full time

Job summary

Grant Thornton (US) is seeking an IA Cybersecurity Senior Risk Associate to help clients strengthen their security posture through risk-based audits, control testing, and maturity assessments.

You will conduct cybersecurity assessments across governance, risk, and technology operations, applying frameworks like NIST, ISO/IEC 27001, COBIT, and HITRUST, while supporting regulatory compliance projects.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or CS required.
• 3+ years of experience in Cybersecurity, internal audit, or IT risk.
• Familiarity with multiple cybersecurity frameworks and standards.

Responsibilities

• Assist in planning and executing cybersecurity internal audits, risk assessments, and control testing engagements.
• Lead walkthroughs, interviews, and workshops with client stakeholders to understand security processes and technology environments.
• Perform cybersecurity control testing and program capability assessments.
• Conduct cybersecurity maturity assessments using frameworks such as NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, and HITRUST.
• Support assessments for regulatory compliance including HIPAA, FedRAMP, GLBA, GDPR, and state data breach laws.
• Document risk and control improvements, develop risk-based recommendations, and client deliverables.
• Identify emerging technology risks (AI, Cloud, Quantum computing), document control deficiencies and mitigation strategies.
• Develop roadmaps to mitigate cyber risks and enhance posture.
• Stay current on cybersecurity trends, threat landscapes, and regulatory developments.
• Provide mentorship and training to junior team members and support business development.

Skills

Cybersecurity

Internal audit

IT risk

Client-facing

Communication

Project management

Risk assessments

Education

Bachelor’s degree in Cybersecurity/Information Technology/ Computer Science

Master’s degree in Cybersecurity (preferred)

CISA/CISSP or similar certifications (preferred)

Tools

NIST CSF

NIST 800-53

NIST 800-171

NIST AI RMF

CSA CCM

ISO/IEC 27001

ISO/IEC 27002

HIPAA

FedRAMP

GLBA

COBIT

HITRUST

PCI DSS

Job description

Grant Thornton (US) is seeking an IA Cybersecurity Senior Risk Associate to help clients strengthen their security posture through risk-based audits, control testing, and maturity assessments.

You will conduct cybersecurity assessments across governance, risk, and technology operations, applying frameworks like NIST, ISO/IEC 27001, COBIT, and HITRUST, while supporting regulatory compliance projects.