Senior Associate, Cybersecurity Advisory & Risk Management

Description

Job Title:
Senior Associate, Cybersecurity Advisory & Risk Management

Department: ITRM

Employment Status: Full Time

Effective Date: 6/12/2026

Medicology Services is a leading healthcare-focused cybersecurity, privacy, compliance, and information risk management consulting firm. We help healthcare organizations manage risk, strengthen security programs, achieve compliance objectives, and improve cybersecurity maturity through practical, business-focused advisory services.

Our consultants work alongside healthcare executives, information security leaders, compliance teams, and operational stakeholders to solve complex cybersecurity and risk management challenges. We pride ourselves on delivering actionable recommendations, building trusted relationships, and helping our clients improve their security posture in meaningful ways.

At Meditology, consultants are more than assessors—they are trusted advisors. You'll have the opportunity to work directly with healthcare executives, lead meaningful client engagements, develop expertise across cybersecurity and risk management disciplines, and help shape the future of healthcare cybersecurity.

This role provides a clear path toward advancement into Manager, Engagement Manager, and Advisory Leadership positions while working alongside some of the industry's leading healthcare cybersecurity professionals.

If you're looking for a role that combines cybersecurity expertise, client interaction, strategic thinking, presentation skills, and professional growth, we'd love to hear from you.

This version positions the role as approximately one level below your Engagement Manager role—less focused on project governance and accountability, and more focused on assessment leadership, client advisory, presentations, report development, and becoming a future trusted consultant. It should compete well against roles from Clearwater, Fortified, Security Risk Advisors, Deloitte Cyber Risk, and PwC Risk & Regulatory, while still reflecting Meditology's healthcare-centric advisory model.

Medicology is seeking a Senior Associate to join our Information Technology Risk Management (ITRM) Advisory practice. This role is ideal for a cybersecurity professional who enjoys working directly with clients, leading assessments, facilitating discussions, and helping organizations address complex cybersecurity, governance, risk, and compliance challenges.

Unlike traditional audit-focused roles, this position combines assessment execution, strategic advisory services, client relationship development, presentation delivery, and thought leadership. The ideal candidate is someone who wants to develop into a trusted advisor capable of leading client engagements, influencing executive decision-making, and helping organizations mature their cybersecurity programs.

This is a highly visible, client-facing consulting role with significant opportunities for growth and advancement.

Serve as a key contributor and day-to-day lead on client engagements.

• Leading client interviews, workshops, and discovery sessions
• Facilitating discussions with executives, operational leaders, and technical teams
• Managing engagement activities, timelines, and deliverables
• Building trusted client relationships
• Identifying client risks, challenges, and opportunities
• Providing practical recommendations that align cybersecurity priorities with business objectives
• Supporting executive briefings and strategic discussions
• Leading portions of client engagements independently while partnering with Managers and Service Line Leaders on larger initiatives

The successful candidate will be comfortable interacting with clients and serving as a trusted advisor throughout the engagement lifecycle.

Lead and support a variety of cybersecurity, risk management, and compliance engagements.

• Conducting NIST Cybersecurity Framework (CSF) 2.0 assessments
• Leading HIPAA Security Risk Assessments (SRAs)
• Performing cybersecurity maturity assessments
• Evaluating governance, risk, and compliance programs
• Conducting AI governance and AI…