Risk and Advisory Services Associate Consultant | 2025

Essential Functions and Primary Duties

• Perform security assessment and compliance activities using NIST, CSC, ISO and other related frameworks.
• Create workpapers and reports accurately portraying client evidence.
• Engage with client projects for a variety of clients and industries, consistently delivering quality client services within expected timeframes and on budget.
• Work with sense of urgency and the ability to shift focus as needed throughout the day.
• Identify, evaluate, and effectively communicate significant exposures to security risks, breakdowns in controls, and other related concerns.
• Communicate in writing findings to both technical and non-technical audiences.
• Successfully balance multiple projects at once, regularly communicating status and issues to CBIZ management and Managing Directors.
• Support the research of emerging technology, requisite security requirements, emerging threats, and develop a way-forward to meet organizational goals.
• Research security standards, security systems, and authentication protocols, and keep abreast with the latest trends in the cybersecurity industry.
• Understand effective information technology processes, including best practices and internal control approaches.
• Interact with and effectively communicate with clients or other third parties as necessary.
• Manage conflict with clients and/or team members in a professional, confident manner.
• Develop relationships with team members across the firm to better serve client needs.
• Assist the firm through participating in training, company-wide projects, and human resource initiatives.
• Accurately represent and record project time and expenses.
• Meet/exceed defined contribution goals for services you will deliver.
• The ability to "work from anywhere" as this role is remote/virtual in nature.
• Travel is estimated to be less than 20-25%.

Preferred Qualifications

• Minimum of 1 year of hands-on experience in a technology or cybersecurity-based industry.
• A bachelor's degree in a technology or business field or equivalent work experience.
• Experience in a client-facing role.
• A relevant professional certification such as Security+, CISSP, CISA, CISM, Microsoft MCSE, Azure, ISO 27001 Auditor and/or Lead Implementer.
• Knowledge of ISO 27001/2 as much of our consulting and collaboration is around ISO 27001.
• Familiar with technologies such as: Active Directory, Federation, Multifactor Authentication, SSO, IDS, IPS, Host Based Firewalls, WAF (Web Application Firewall), DNS, DHCP, HTTPS/TLS, SSH, SMTP, Syslog, Key Management, PKI, Tokens, SAML, OAUTH.
• Strong skills in Microsoft Office applications.
• Possess integrity, principles, and work ethic.
• Strong analytical, interpersonal, and verbal/written communication skills.
• Ability to read, write, and speak fluent English.
• Applicants must be able to pass a background check.

Qualifications Required

• High School Diploma or GED equivalent required; Bachelor's degree preferred
• 1 year of relevant experience
• Must be able to work in a team environment
• Demonstrated ability to communicate verbally and in writing throughout all levels of organization, both internally and externally
• Proficient use of applicable technology
• Must be able to travel based on client and business needs

#LI-BK1 #LI-Onsite