Associate - Cybersecurity Compliance & Advisory
SecureIT Reston, Virginia, United States · $60K–$95K/yr
Computer and Network Security · 51-200 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Associate performs hands-on cybersecurity assessment and advisory workstreams under the direction of a Manager. They are responsible for producing high-quality deliverables, managing client interactions, and ensuring compliance with established standards.
What they look for
Requirements
Candidates must have 1-2 years of experience in security and compliance along with a bachelor's degree in a relevant field. A working knowledge of NIST 800-53 and progress toward professional certifications are preferred.
Full description
About the Role
The Associate is an entry level individual contributor who performs hands-on assessment and advisory work on one or more client engagements under the direction of a Manager. Associates take ownership of assigned workstreams and deliverables, while the Manager retains accountability for overall project execution, scope, schedule, and budget.
SecureIT staffs from a firm-wide talent pool rather than fixed teams. The engagements and colleagues an Associate works with will change as staffing needs evolve; Associates work with whoever is assigned based on capability and availability.
Workstream Ownership
Consistent with SecureIT's model, the Associate owns high-quality execution of assigned workstreams but does not own overall project leadership or the formal employee lifecycle.
The Associate owns:
● Hands-on execution of assigned assessment/advisory workstreams and deliverables.
● Quality and completeness of their own work product, consistent with SecureIT methodology and standards.
● Client interaction at the workstream level (e.g., evidence requests, interviews, clarifying questions) under the Manager's direction.
● Timely escalation of workstream issues, blockers, or quality concerns to the Manager.
Responsibilities and tasking include:
Workstream Execution & Quality
● Perform hands-on execution of assigned assessment/advisory tasks with minimal oversight.
● Produce high-quality deliverables (e.g., control assessments, evidence reviews, findings, documentation) on schedule.
● Self-QA work product before submission and incorporate Manager feedback promptly.
● Track and report status and hours for assigned tasks to the Manager.
● Flag scope, timeline, or quality risks within their workstream to the Manager.
Client Support
● Support evidence/request collection, interview scheduling, and information gathering with the client(s).
● Respond to client questions within their workstream, escalating anything outside their scope to the Manager.
● Represent SecureIT professionally in all client interactions.
Quality, Capability & Continuous Improvement
● Maintain current working knowledge of relevant frameworks and standards.
● Contribute lessons learned, templates, and process improvements to the Manager and playbooks.
● Pursue growth toward Sr. Associate-level responsibilities (e.g., scoping, budgeting, client ownership).
What You’ll Bring to the Table
Knowledge & Experience
● 1-2 years of experience in security and compliance within a professional services capacity.
● Working knowledge of NIST 800-53 and other relevant compliance frameworks.
● Experience contributing to assessment or advisory engagements, including evidence review and documentation.
● Ability to manage multiple assigned tasks and deadlines with limited supervision.
Soft Skills
● Strong attention to detail and consistent, high-quality work product.
● Clear written and verbal communication skills, including with clients.
● Ability to take direction and incorporate feedback quickly.
● Comfortable working independently and as part of a larger team.
● Developing leadership skills — reliability, initiative, and willingness to guide others.
● Effective time management and adaptability in a fast-changing environment.
Certifications & Education
● Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
● Progress toward or completion of a relevant certification (e.g., Sec+, CySA+, CCSK, AWS Certified Solutions Architect Associate or other cloud-relevant certifications) preferred.
How Success Is Defined
Success in this role is measured primarily through the quality and reliability of workstream execution. A successful Associate consistently delivers:
● High-quality, on-time deliverables within their assigned workstream(s).
● Strong, professional client interactions at the workstream level.
● Growing readiness to take on Sr. Associate-level responsibilities.
The pay range for this role is:
60,000 - 95,000 USD per year dependent on candidate experience
Similar roles
-
Senior Baseline Security Engineer (CIS & STIGs)
phia, LLC United States · $125K–$175K/yr
-
Senior Security Engineer, Incident Response
Twilio United States · $142K–$208K/yr
-
SAP Application Security Consultant (GRC)
Accenture Federal Services Washington, District of Columbia, United States · $106K–$206K/yr
-
Sr Lead Security Engineer
JPMorgan Chase & Co. Jersey City, New Jersey, United States · $176K–$260K/yr
-
SAP Application Security GRC/BTP Consultant
Accenture Federal Services Washington, District of Columbia, United States · $92K–$179K/yr
-
Sr. Security Engineer
Octus United States