Cybersecurity Compliance & Advisory Senior Associate

About the Role

The Sr. Associate is an experienced individual contributor who performs advanced, hands-on assessment and advisory work on one or more client engagements under the direction of a Manager. Sr. Associates take ownership of assigned work streams and deliverables, provide day-to-day guidance to Associates, and act as a trusted resource for client-facing detail work, while the Manager retains accountability for overall project execution, scope, schedule, and budget.

SecureIT staffs from a firm-wide talent pool rather than fixed teams. The engagements and colleagues a Sr. Associate works with will change as staffing needs evolve;
Sr. Associates work with whoever is assigned based on capability and availability.

Workstream Ownership vs. Project Leadership

Consistent with SecureIT's model, the Sr. Associate owns high-quality execution of assigned work streams.

The Sr. Associate owns:

● Hands-on execution of assigned assessment/advisory work streams and deliverables.

● Quality and completeness of their own work product, consistent with SecureIT methodology and standards.

● Day-to-day guidance and knowledge-sharing for Associates working alongside them.

● Client interaction at the workstream level (e.g., evidence requests, interviews, clarifying questions) under the Manager's direction.

● Timely escalation of workstream issues, blockers, or quality concerns to the Manager.

Responsibilities and tasking include

Workstream Execution & Quality

● Perform hands-on execution of assigned assessment/advisory tasks with minimal oversight.

● Produce high-quality deliverables (e.g., control assessments, evidence reviews, findings, documentation) on schedule.

● Self-QA work product before submission and incorporate Manager feedback promptly.

● Track and report status and hours for assigned tasks to the Manager.

● Flag scope, timeline, or quality risks within their workstream to the Manager.

Client Support

● Support evidence/request collection, interview scheduling, and information gathering with the client(s).

● Respond to client questions within their workstream, escalating anything outside their scope to the Manager.

● Represent SecureIT professionally in all client interactions.

● Provide day-to-day guidance and technical direction to Associates on the engagement.

● Help onboard new or junior team members to project tools, processes, and expectations.

● Provide informal, timely feedback to the Manager on Associate performance based on observed project work.

Quality, Capability & Continuous Improvement

● Maintain current working knowledge of relevant service-line frameworks and standards.

● Contribute lessons learned, templates, and process improvements to the Manager and playbooks.

● Pursue growth toward Manager-level responsibilities (e.g., scoping, budgeting, client ownership).

What You’ll Bring to the Table

Knowledge & Experience

● 2+ years of experience in security and compliance within a professional services capacity.

● Working knowledge of NIST 800-53 or other relevant compliance frameworks.

● Experience contributing to assessment or advisory engagements, including evidence review and documentation.

● Ability to manage multiple assigned tasks and deadlines with limited supervision.

Soft Skills

● Strong attention to detail and consistent, high-quality work product.

● Clear written and verbal communication skills, including with clients.

● Ability to take direction and incorporate feedback quickly.

● Comfortable working independently and as part of a larger team.

● Developing leadership skills — reliability, initiative, and willingness to guide others.

● Effective time management and adaptability in a fast-changing environment.

Certifications & Education

● Bachelor's…