Senior Cyber Internal Audit: Risk & Controls (Hybrid)

Grant Thornton (US); Edison (NJ); Hybrid; USD 101,000 - 129,000; Full time

Benefits offered by this job

Hybrid work model

Flexible time off

Professional growth opportunities

Job summary

Grant Thornton is seeking an IA Cybersecurity Senior Risk Associate to deliver consulting services across cybersecurity risk areas, including governance, risk assessments, control testing, and maturity evaluations. You will collaborate with risk and compliance teams to assess and improve client cybersecurity postures, with mentoring responsibilities and project leadership on engagements.

You’ll contribute to planning, fieldwork, and reporting for engagements, developing risk-based

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS required.
• Master’s degree preferred.
• 3+ years in Cybersecurity, internal audit, or IT risk.
• CISA or CISSP preferred.
• Experience as a client-facing professional in consulting is desired.
• Familiarity with cybersecurity frameworks and standards including NIST CSF/800-53/800-171, CSA CCM, ISO 27001/27002, HIPAA, FedRAMP, GLBA, COBIT, HITRUST, PCI DSS.

Responsibilities

• Plan and execute cybersecurity internal audits, risk assessments, and control testing engagements.
• Lead walkthroughs, interviews, and workshops with client stakeholders to understand security processes and environments.
• Perform cybersecurity control testing and program capability assessments.
• Conduct maturity assessments using NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, HITRUST.
• Support assessments for HIPAA, FedRAMP, GLBA, GDPR, and state data breach laws.
• Document risks, controls, and recommendations; develop client deliverables.
• Identify emerging technology risks (AI, Cloud, quantum) and develop mitigation strategies.
• Develop roadmaps to mitigate cyber risks and enhance security posture.
• Stay current on cybersecurity trends and regulatory developments; mentor juniors.

Skills

Cybersecurity

Internal audit

Risk assessment

Control testing

Maturity assessments

Regulatory frameworks

Project management

Communication skills

Travel willingness

Education

Bachelor’s degree in Cybersecurity/IT/CS

Master’s degree preferred

CISA/CISSP certifications preferred

Tools

NIST CSF

NIST 800-53

NIST 800-171

CSA CCM

ISO/IEC 27001

HITRUST

COBIT

PCI DSS

CISA/CISSP

Job description

Grant Thornton is seeking an IA Cybersecurity Senior Risk Associate to deliver consulting services across cybersecurity risk areas, including governance, risk assessments, control testing, and maturity evaluations. You will collaborate with risk and compliance teams to assess and improve client cybersecurity postures, with mentoring responsibilities and project leadership on engagements.

You’ll contribute to planning, fieldwork, and reporting for engagements, developing risk-based