Senior Associate, Cybersecurity Advisory & Risk Management

Senior Associate, Cybersecurity Advisory & Risk Management Position Overview Job Title: Senior Associate, Cybersecurity Advisory & Risk Management Department: ITRM Employment Status: Full Time Effective Date: 6/12/2026 About Us Meditology Services is a leading healthcare-focused cybersecurity, privacy, compliance, and information risk management consulting firm. We help healthcare organizations manage risk, strengthen security programs, achieve compliance objectives, and improve cybersecurity maturity through practical, business-focused advisory services. Our consultants work alongside healthcare executives, information security leaders, compliance teams, and operational stakeholders to solve complex cybersecurity and risk management challenges. We pride ourselves on delivering actionable recommendations, building trusted relationships, and helping our clients improve their security posture in meaningful ways. Why Meditology At Meditology, consultants are more than assessors – they are trusted advisors. You'll have the opportunity to work directly with healthcare executives, lead meaningful client engagements, develop expertise across cybersecurity and risk management disciplines, and help shape the future of healthcare cybersecurity. This role provides a clear path toward advancement into Manager, Engagement Manager, and Advisory Leadership positions while working alongside some of the industry's leading healthcare cybersecurity professionals. If you're looking for a role that combines cybersecurity expertise, client interaction, strategic thinking, presentation skills, and professional growth, we'd love to hear from you. This version positions the role as approximately one level below your Engagement Manager role—less focused on project governance and accountability, and more focused on assessment leadership, client advisory, presentations, report development, and becoming a future trusted consultant. It should compete well against roles from Clearwater, Fortified, Security Risk Advisors, Deloitte Cyber Risk, and PwC Risk & Regulatory, while still reflecting Meditology's healthcare-centric advisory model. Position Description Meditology is seeking a Senior Associate to join our Information Technology Risk Management (ITRM) Advisory practice. This role is ideal for a cybersecurity professional who enjoys working directly with clients, leading assessments, facilitating discussions, and helping organizations address complex cybersecurity, governance, risk, and compliance challenges. Unlike traditional audit-focused roles, this position combines assessment execution, strategic advisory services, client relationship development, presentation delivery, and thought leadership. The ideal candidate is someone who wants to develop into a trusted advisor capable of leading client engagements, influencing executive decision-making, and helping organizations mature their cybersecurity programs. This is a highly visible, client-facing consulting role with significant opportunities for growth and advancement. Responsibilities Lead client interactions: conduct interviews, workshops, and discovery sessions. Facilitate discussions with executives, operational leaders, and technical teams. Manage engagement activities, timelines, and deliverables. Build trusted client relationships. Identify client risks, challenges, and opportunities. Provide practical recommendations that align cybersecurity priorities with business objectives. Support executive briefings and strategic discussions. Lead portions of client engagements independently while partnering with Managers and Service Line Leaders on larger initiatives. Cybersecurity & Risk Assessments Conduct NIST Cybersecurity Framework (CSF) 2.0 assessments. Lead HIPAA Security Risk Assessments (SRAs). Perform cybersecurity maturity assessments. Evaluate governance, risk, and compliance programs. Conduct AI governance and AI risk assessments. Assess third-party risk management programs. Identify cybersecurity risks, control gaps, and improvement opportunities. Develop risk registers, remediation roadmaps, and strategic recommendations. Facilitate stakeholder interviews and workshops. Present assessment results and recommendations to executive leadership. HITRUST Readiness & Certification Assessments Perform HITRUST e1, i1, and r2 readiness assessments. Support validated HITRUST certification assessments. Conduct control maturity and gap analyses. Review policies, procedures, and supporting evidence. Develop remediation plans to address identified gaps. Advise clients on HITRUST implementation strategies and certification readiness. Support ongoing compliance and program maturity initiatives. Present readiness and assessment results to client stakeholders. SOC 2 Readiness & Attestation Engagements Support SOC 2 readiness assessments. Evaluate controls against the Trust Services Criteria. Assist clients with remediation planning and control implementation. Review policies, procedures, and evidence artifacts. Support SOC 2 Type I and Type II attestation preparation activities. Help clients operationalize governance and compliance processes to support ongoing attestation requirements. Experience supporting SOC 2 Type II attestation engagements is highly desirable. Executive-Level Deliverables Cybersecurity assessment reports Executive summaries Risk registers Remediation roadmaps Strategic recommendations Maturity assessment reports Presentation decks and workshop materials Board and executive-level communications Presentation & Facilitation Lead client interviews and workshops. Facilitate cybersecurity and risk discussions. Present findings and recommendations to leadership teams. Deliver assessment readouts and remediation planning sessions. Support executive and board-level presentations. Develop professional PowerPoint presentations and client-facing materials. Advisory & Strategy Services Support clients in developing and improving cybersecurity and risk management programs. Examples Include Cybersecurity strategy development. Governance program assessments. Security program benchmarking. Risk management program development. AI governance and oversight initiatives. Cybersecurity roadmap creation. Remediation planning and prioritization. Third-party risk management strategy. Security operating model development. Policy and governance program development. Contribute to Practice Growth & Thought Leadership Participate in strategic account discussions. Identify opportunities to deliver additional value to clients. Contribute to white papers, blog posts, and thought leadership initiatives. Support webinars, conference presentations, and educational content. Research emerging cybersecurity, healthcare, and AI-related trends. Share knowledge and mentor junior team members. Qualifications 4–7 years of experience in cybersecurity, information security, IT risk, compliance, consulting, or audit. Experience conducting cybersecurity, compliance, or risk assessments. Experience leading client interviews. Experience developing professional reports and presentations. Experience presenting findings and recommendations to clients. Experience managing portions of client engagements independently. Consulting experience preferred. Technical Knowledge NIST Cybersecurity Framework (CSF) 2.0. HIPAA Security Rule. HITRUST (e1, i1, and r2). SOC 2 Type I and Type II.

NIST SP 800-53.

CIS Critical Security Controls. Third-Party Risk Management. AI Governance and Risk Management. HIPAA Privacy Rule knowledge a plus. Professional Skills Strong consulting and advisory mindset. Excellent written and verbal communication skills. Strong presentation and facilitation abilities. Executive presence and client-facing confidence. Strong analytical and critical thinking skills. Ability to connect cybersecurity risks to business outcomes. Ability to manage multiple priorities and engagements. Strong attention to detail and organizational skills. Intellectual curiosity and desire for continuous learning. Ability to develop trusted relationships with clients and colleagues. Preferred Certifications

CISSP

CISM CISA

HCISPP

CRISC

HITRUST CCSFP

Security+ Candidates actively pursuing certifications are encouraged to apply. #J-18808-Ljbffr Meditology