> Markdown version of [/jobs/ext/1291855-it-audit-risk-and-cybersecurity-senior-associate](https://www.wearedevelopers.com/jobs/ext/1291855-it-audit-risk-and-cybersecurity-senior-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Audit, Risk and Cybersecurity - Senior Associate - **Company:** CohnReznick LLP - **Location:** Las Cruces, NM, United States - **Experience:** Expert - **Salary:** $85,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Client Server Models, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Software Documentation, Cyber Security, Information Systems, Databases, Data Warehousing, Identity and Access Management, Information Technology Audit, Network Architecture, Systems Development Life Cycle, Blockchain, Systems Architecture, IT General Controls (ITGC), Information Technology - **Published:** July 16, 2026 - **Apply:** https://www.jofdav.com/jobs/58855339-it-audit-risk-and-cybersecurity-senior-associate ## About the Role * Bachelor's degree in Information Systems, Computer Science, Accounting, Cybersecurity, or a related field. * 4+ years of relevant experience in IT audit, IT risk, cybersecurity, or technology advisory roles. * Hands-on experience performing IT audits, IT risk assessments, or cybersecurity assessments. * Strong understanding of internal controls, risk management concepts, and common cybersecurity frameworks. * Background and understanding of the risks and controls in technologies such as web, cloud, client/server, open systems architecture, data warehousing, and imaging * Proficient understanding of cloud security, Identity and Access Management, ERP, Operating Systems, Databases, and Network Infrastructure components * Knowledge of risk and controls related to emerging technologies such as AI, blockchain, and automation. * Working knowledge of Cloud Security Framework, General Data Protection Requirement (GDPR), COBIT 5, ISO 27001/2, HIPAA, California Consumer Protection Act (CCPA), NIST 800-171/800-53/NIST 800-37 * Excellent written and verbal communication skills, with the ability to explain technical concepts to non-technical audiences. * Ability to manage multiple priorities and work effectively in a client-facing consulting environment. * Participate in business development activities such as proposal writing, professional networking, and thought leadership development * Certified Information Systems Auditor (CISA) - strongly preferred. * Certified CMMC Assessor (CCA) or active progress toward CMMC Assessor certification - strongly preferred. * Additional certifications a plus, such as: * Experience supporting federal, government contractor, or regulated industry clients. * Ability to work onsite 3 days per week, and travel up to 50% (domestic and international) ## Description The Senior Associate will support and lead the execution of IT audit, IT risk management, and cybersecurity assessment engagements for a diverse client base, including organizations subject to regulatory, contractual, and federal cybersecurity requirements. This role will play a key part in performing risk-based IT audits, cyber maturity and compliance assessments, and advisory services. The Senior Associate is expected to work independently on assigned areas, contribute to client deliverables, mentor junior staff, and collaborate closely with Managers and Partners to deliver high-quality, practical solutions. . IT Audit & IT Risk * Execute and support risk-based IT audits and IT risk assessments, including evaluation of IT general controls (ITGCs), automated application controls, and key technology-enabled business processes. * Assess control design and operating effectiveness across domains such as access management, change management, system development lifecycle (SDLC), incident response, and vendor management. Support SOX-relevant IT controls testing, internal audit co-sourcing, and other compliance-driven engagements as applicable. * Identify control gaps, assess risk impact, and develop clear, actionable recommendations for remediation. Cybersecurity & CMMC Assessments * Perform cybersecurity assessments and readiness reviews aligned to CMMC, NIST SP 800-171, NIST CSF, ISO27001, and other recognized frameworks. * Support or lead CMMC gap assessments, readiness assessments, and advisory activities for organizations in the Defense Industrial Base (DIB). * Assist in evidence collection, validation, and analysis for cybersecurity and compliance assessments. * Contribute to development of client deliverables, including assessment reports, risk summaries, and management presentations. Client Delivery & Engagement Support * Serve as a day-to-day engagement team member, managing assigned workstreams and coordinating with team members and client stakeholders. * Simultaneously serve multiple engagements while maintaining high quality standards * Work with clients in a broad array of industries including information technology, financial services, retail & consumer products, pharmaceuticals, electronics, manufacturing, media, and government contracting etc. * Facilitate client interviews and walkthroughs to understand IT environments, security controls, and operational processes. * Ensure workpapers and deliverables meet quality, consistency, and documentation standards. * Understand clients' organizations and provide value-added solutions and best practices * Identify emerging risks, trends, and improvement opportunities for clients. Team Collaboration & Development * Mentor and review work performed by Consultants and Analysts. * Share knowledge and best practices related to IT audit, cybersecurity, and CMMC requirements. * Contribute to internal methodology development, tools, and training initiatives. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Develop a Blockchain Application in JavaScript with Lisk SDK](https://www.wearedevelopers.com/videos/188-develop-a-blockchain-application-in-javascript-with-lisk-sdk) ## Related Articles - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)