Cyber Advisory Associate

Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!  

We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people. 

At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.  

Job Summary:

The Cyber Advisory Associate will support the delivery of cybersecurity compliance and advisory engagements focused on HIPAA, HITRUST, PCI DSS, CMMC, NIST, and other cybersecurity frameworks. This role provides an opportunity to work directly with clients to evaluate cybersecurity programs, perform control assessments, review documentation and evidence, identify compliance gaps, and develop practical recommendations to improve security and regulatory compliance.

Our Cyber Advisory practice is experiencing significant growth due to increasing cybersecurity threats, regulatory requirements, and demand for trusted compliance partners. We are seeking a motivated and detail-oriented professional with an interest in cybersecurity, risk management, and compliance who is eager to build technical expertise while working alongside experienced cybersecurity advisors.

The ideal candidate is curious, analytical, collaborative, and passionate about helping organizations strengthen their cybersecurity posture while developing a career in cybersecurity consulting.

Duties & Responsibilities:

• Support the delivery of cybersecurity compliance assessments, including HIPAA, HITRUST, PCI DSS, CMMC, NIST, and other cybersecurity framework engagements.
• Assist with client interviews to understand business processes, security practices, technologies, and control environments.
• Review policies, procedures, system documentation, configurations, and other evidence to evaluate compliance with applicable requirements.
• Perform testing and validation of cybersecurity controls, including:
• Identity and access management
• Vulnerability management
• Security awareness training
• Logging and monitoring
• Incident response
• Business continuity and disaster recovery
• Third-party risk management
• Endpoint security
• Document assessment procedures, testing results, observations, and recommendations in accordance with firm methodology.
• Assist with identifying cybersecurity risks, control gaps, and opportunities for process improvement.
• Support senior team members in preparing client deliverables, assessment reports, presentations, and remediation recommendations.
• Assist with evidence collection, tracking, and organization throughout the assessment lifecycle.
• Participate in client meetings and develop professional relationships with client stakeholders.
• Develop an understanding of cybersecurity frameworks, regulatory requirements, and industry best practices.
• Contribute to engagement planning, project tracking, and quality control activities.
• Participate in ongoing training and professional development opportunities to build cybersecurity assessment expertise.
• Manage assigned tasks across multiple engagements while maintaining quality and meeting deadlines.

Education & Experience: 

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Accounting, Management Information Systems (MIS), or related field preferred.
• 1–3 years of experience in cybersecurity, information technology, audit, risk management, compliance, or a related field.
• Internship, academic projects, or entry-level experience related to cybersecurity, IT audit, governance, risk, and compliance (GRC) preferred.
• Interest in cybersecurity compliance frameworks and security assessment methodologies.
• Experience working in a professional services, consulting, technology, healthcare, government contracting, or regulated industry environment preferred.
• Ability to learn new technologies, regulatory requirements, and cybersecurity concepts quickly.
• Strong attention to detail and ability to organize and analyze information.

#LI - hybrid