Cyber Compliance Associate

About the role

Join a leading global professional services firm as a Cyber Compliance Associate. You will help clients assess and improve their cyber security governance, ensuring compliance with industry and government standards while supporting the development of robust security programs.

Key responsibilities

• Conduct assessments to identify risks in clients' cyber security governance and compliance programs.
• Measure and report compliance with standards such as PCI DSS, CMMC, FEDRAMP, GDPR, CCPA, etc.
• Perform analysis and testing of mobile, web applications and services (SOAP, WSDL, UDDI).
• Execute internet penetration testing using black‑box and white‑box methodologies.
• Review application code, system and device configurations with manual and automated tools.
• Communicate technical findings to non‑technical audiences.
• Develop and review threat‑intelligence programs using established models.
• Support the implementation of security‑management tools such as eGRC and create target operating models for cyber security programs.

Required profile

• Bachelor’s degree or equivalent experience.
• 0–2 years of relevant experience in cyber security, compliance or related fields.
• High integrity, confidentiality and adherence to company policies.

Required skills

• Strong knowledge of computer network technologies, protocols and digital forensics.
• Programming/scripting experience (Perl, Python, C, Java, PHP, ASP).
• Experience with threat‑actor tracking, malware‑campaign analysis and intelligence frameworks (Kill Chain, Diamond model, PRI).
• Hands‑on experience with security tools such as AppScan, Metasploit, Burp Suite, Nessus, Social Engineering Toolkit, Kali Linux.
• Configuration and security experience on operating systems (HP‑UX, Linux, Solaris, AIX) and web servers.
• Familiarity with cyber security frameworks and standards (ISO, NIST, CIS, PCI DSS, CMMC, FEDRAMP, GDPR, CCPA).