Vacancy expired!
We are looking for a Cybersecurity Associate Consultant to join a national tax consulting services firm that works with CPA firms and their business clients to identify and claim available federal and state government-sponsored tax credits and incentives. This is a direct hire, hybrid capable role located in Houston, TX. In this role, you will serve as a cybersecurity analyst about securing data and information systems and all associated cybersecurity policies and procedures for their clients. You should possess an understanding of how the security controls identified in leading frameworks like the NIST SP 800 and ISO 2700x apply to the process of assessing an organization’s IT infrastructure and cloud technologies. Contributes to the review of the applicable severity value for an identified vulnerability (e.g., non-compliant security control), and determines the possible ramifications. Assists Cybersecurity Consultant and Project Manager in briefing clients on findings and recommended remediation.
What You Will Do:- Assists with defining security objectives and system-level performance requirements.
- Assists in the assessment of the configuration of secure systems, and tests security products/systems to detect computer and information security weaknesses.
- Coordinates the collection of documentation from clients.
- Coordinates and conducts client interviews, recording results in working papers.
- Assists with testing and exercises of security controls.
- Assists with the production of reports and updates to clients and senior members of the Cybersecurity team.
- 2+ years of relevant experience in assessing security controls and conducting assessments for either large, complex organizations or mid-market businesses.
- CompTIA Sec+, (ISC)2 CISSP, CISM, CISA Certification
- Familiarity in at least two of the following security, privacy, governance, risk, and compliance domains:
- IT Systems Hardening
- Access Management
- Vulnerability Management
- Incident Management
- Endpoint security
- Cloud Security
- Governance
- Network security
- Compliance (NY DFS, GDPR, SOx, PCI/PA-DSS / HIPAA, etc.)