Cybersecurity & Penetration Testing… at Cherry Bekaert · West…

Summary: Cherry Bekaert is ranked among the largest accounting and consulting firms in the country, delivering innovative advisory, assurance and tax services. The Cybersecurity & Penetration Testing Associate will support technology, cybersecurity, and control audit engagements, while helping identify cybersecurity control weaknesses and assisting with technical assessments. Responsibilities: - Support the performance of technology, cybersecurity, privacy and general control audit/ advisory engagements as well as technical cybersecurity assessments - Under supervision of Managers and/or Partners, you will help identify cybersecurity control weaknesses, design gaps, vulnerabilities, audit exceptions and inefficiencies with appropriate recommendations to management - Your tasks may also include designing, configuring, deploying, and maintaining penetration testing infrastructure and security tools, while assisting with the execution of technical assessments and troubleshooting issues in real time - Support strong work papers conforming to the firm’s methodology/standards and participation in report drafting - Identify and communicate results to leadership - Maintain a strong client focus by understanding the client’s business needs while developing productive working relationships with client personnel in order to accomplish audit objectives - Strong project management skills, ability to multi-task and attention to detail Required Qualifications: - Bachelor's degree preferably in Cybersecurity, Information Security, Information Systems, Computer Science or Management Information Systems disciplines - Willingness to pursue relevant professional designations (ex. CEH, CISA, CISSP, etc.) - Knowledge in technology risk management and IT governance principles - Demonstrated ability to configure and deploy security tools and testing infrastructure - Ability to travel as needed, not expected to exceed 25% Required Skills: Cybersecurity, Penetration testing, Technology risk management, IT governance, Security tools configuration, deployment, Cybersecurity risk, gap assessments, Cybersecurity technical assessments, CMMC, NIST Cybersecurity Framework, NIST 800-115, NIST 800-171, NIST 800-53, ISO 27001, ISO 27002, ISO 42001, PCI, HIPAA, HITRUST, AICPA Cybersecurity Risk Management Framework, AICPA SOC 1, AICPA SOC 2, AICPA SOC 3, AI risk, adversarial testing, Managed detection, response, Threat monitoring, Vulnerability assessments, Incident response, Cybersecurity governance risk, compliance, Adversarial AI, LLM testing, CEH, CISA, CISSP, Client focus, Project management Benefits: Annual bonus, Medical, dental, and vision care, Disability and life insurance, Generous Paid Time Off, Retirement plans, Paid Care Leave, Other programs that are dedicated to enhancing your personal and work life and providing you and your family with a measure of financial protection