Cyber Advisory Senior Associate

Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!  

We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people. 

At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.  

Job Summary:

The Cyber Advisory Senior Associate will be responsible for leading the day-to-day execution and delivery of cybersecurity compliance and advisory engagements focused on HIPAA, HITRUST, PCI DSS, CMMC, NIST, and other cybersecurity frameworks. This role works directly with clients to assess security and privacy programs, identify compliance gaps, validate control effectiveness, and provide practical recommendations that strengthen cybersecurity and regulatory compliance.

Our Cyber Advisory practice is experiencing significant growth due to increasing regulatory requirements and demand for trusted compliance partners. We are seeking a self-motivated professional with strong assessment experience, excellent communication skills, and a passion for helping organizations improve their cybersecurity posture.

Duties & Responsibilities:

• Lead the day-to-day execution of cybersecurity assessment engagements, including HIPAA, HITRUST, PCI DSS, CMMC, and other cybersecurity compliance engagements.
• Perform interviews with client personnel to understand business processes, security practices, and control implementation.
• Review policies, procedures, system configurations, technical evidence, and operational processes to evaluate compliance with applicable frameworks.
• Perform detailed testing of cybersecurity controls, including identity and access management, vulnerability management, logging and monitoring, encryption, incident response, business continuity, third-party risk management, and endpoint security.
• Identify compliance gaps, control deficiencies, and cybersecurity risks while developing practical, risk-based remediation recommendations.
• Assist clients in understanding assessment findings and support remediation planning through collaborative discussions with technical and executive stakeholders.
• Prepare high-quality workpapers, assessment documentation, observations, and client deliverables that clearly communicate risks, compliance status, and recommended corrective actions.
• Contribute to engagement planning, scoping, evidence collection, and project management activities.
• Mentor, coach, and review the work of junior team members to support their technical and professional development.
• Maintain a strong understanding of emerging cybersecurity threats.
• Support business development activities by participating in client presentations, proposal development, webinars, conferences, and thought leadership initiatives.
• Build and maintain strong client relationships while delivering exceptional client service throughout the engagement lifecycle.
• Manage multiple engagements simultaneously while meeting project deadlines and maintaining high-quality standards.

Education & Experience: 

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Accounting, Management Information Systems (MIS), or a related field required.
• 3–6+ years of experience performing cybersecurity assessments, compliance audits, or information security consulting engagements.
• Experience performing assessments against one or more of the following:
  • HIPAA Security Rule
  • HITRUST CSF
  • PCI DSS
  • CMMC
  • NIST SP 800-171
  • NIST Cybersecurity Framework (CSF)
  • ISO/IEC 27001
• Experience working in a public accounting, cybersecurity consulting, or professional services environment preferred.
• Experience conducting client interviews, evidence reviews, technical control testing, and report writing.

Ability to manage multiple concurrent engagements and work effectively in a client-facing environment.

Preferred Certifications

One or more of the following certifications preferred:

• CISA
• CISSP
• HITRUST Certified CSF Practitioner (CCSFP)
• HITRUST Certified CSF Assessor (CCA)
• PCI Qualified Security Assessor (QSA)
• Certified CMMC Professional (CCP)
• Certified CMMC Assessor (CCA)
• CRISC
• Security+

#LI - hybrid