As a Cybersecurity Risk Associate, you will conduct risk assessments, provide AI security advisory, assess security postures, and train clients on cybersecurity best practices.
Cybersecurity Risk Associate - Hybrid position
Drawbridge Client Success / Technical AdvisoryWorking at DrawbridgeAt Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment. You will be joining an agile team that will help you at every level of your career to identify and use your strengths to grow. This is an opportunity to work at a company that is open to new ideas as we build a dynamic and diverse environment for our employees. The work will be challenging and rewarding. You will gain hands-on experience from a team who strives to see its employees succeed.Working in Client SuccessYou will be joining a team of technical cybersecurity consultants who have a passion for understanding and defending against emerging cyber threats. Our clients rely on our expertise to help them navigate the constantly changing cybersecurity landscape, and our team of consultants pair their technical knowledge and industry insight to offer critical risk management advice. The technical advisory team works as a collaborative unit, with each member bringing a unique technical skillset to the table.Our Values
Drawbridge Client Success / Technical AdvisoryWorking at DrawbridgeAt Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment. You will be joining an agile team that will help you at every level of your career to identify and use your strengths to grow. This is an opportunity to work at a company that is open to new ideas as we build a dynamic and diverse environment for our employees. The work will be challenging and rewarding. You will gain hands-on experience from a team who strives to see its employees succeed.Working in Client SuccessYou will be joining a team of technical cybersecurity consultants who have a passion for understanding and defending against emerging cyber threats. Our clients rely on our expertise to help them navigate the constantly changing cybersecurity landscape, and our team of consultants pair their technical knowledge and industry insight to offer critical risk management advice. The technical advisory team works as a collaborative unit, with each member bringing a unique technical skillset to the table.Our Values
- Innovation: As the market leader, Drawbridge draws on its in-depth, collective expertise in its constant effort to innovate both our platform and our approach to service
- Integrity: Our clients and partners lean on us because they know we are trustworthy and honor what we say
- Collaboration: We are here to win, and we only win when we work together across teams
- Diversity: We are inclusive. We honor, respect, and appreciate each other's differences and perspectives
In this role you will:
- Conduct risk assessments and security audits of client cloud environments
- Assess the security posture of cloud platforms and infrastructure including but not limited to Microsoft 365, Google Workspace, Azure, and AWS
- Perform risk assessments of AI platforms used by clients, including Claude, ChatGPT, and Gemini — evaluating data handling, access controls, model configuration, and integration risk
- Provide AI security advisory to clients, covering safe adoption, deployment patterns, permission and data-sharing reviews, policy development, and ongoing governance of AI tools across the firm
- Lead AI security training sessions for client teams — translating evolving AI risks, regulatory expectations, and best practices into practical guidance employees and stakeholders can act on
- Schedule, conduct, and lead risk assessment meetings with clients and IT providers
- Assess operational business risks and provide remediation and mitigation guidance
- Act as an escalation point for technical questions from clients and internal teams
- Participate in the enhancement of existing Drawbridge products, reports, and processes
- Assist and advise clients with cyber training, incident response, operational due diligence, and/or SEC cyber audit requirements
- Identify and evaluate complex business and technology risks, controls to mitigate risks, and related opportunities for control improvement
- Learn applicable regulatory framework and compliance guidelines for cybersecurity (including but not limited to SEC, NFA, FCA, MAS)
- Continuously learn and advance your cybersecurity knowledge, bringing new insights back to both client engagements and the broader team
- Maintain tracking of internal tasks, provide status updates to clients, team members, and managers, and ensure open and consistent communication with all stakeholders
- Establish and maintain relationships with clients, IT providers, and other service providers
You Have
- Sound knowledge of IT networking concepts including but not limited to segmentation, DNS, the OSI model, and network topologies
- Working knowledge of AI risk concepts such as data leakage, third-party model exposure, and responsible AI use in enterprise environments
- Sound knowledge of cloud infrastructure controls and concepts related to solutions such as Microsoft 365, AWS, and Google Workspace
- Familiarity with cybersecurity concepts such as business continuity, disaster recovery, incident response, and network security
- An understanding of vulnerability management concepts and methodologies
- Proven experience in a client/customer-facing role
- Experience discussing technical concepts with a non-technical audience
- Excellent written and verbal communication skills
- Excellent time management skills
- Sound knowledge of security standards and frameworks such as, but not limited to, NIST, CIS, COBIT, etc.
- Previous experience deploying security controls and policies within cloud infrastructure environments
- Familiarity with AI security frameworks and guidance (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and enterprise AI governance
- Knowledge of hedge fund, private equity, or RIA operations/compliance
- CRISC, CISA, CISSP, CIPP, AAISM, Security+ certifications
- $90,000 – $105,000
We Offer
- Competitive compensation package
- Employer Retirement/401(k) plan with company contribution
- Medical, Dental, Vision Coverage, Disability, and Life Insurance
- Health Savings Account (HSA) or Flexible Spending Account (FSA)
- Generous Paid Time Off Policy
- Healthy Work/Life Balance
- Phone Reimbursement Perk
- Exclusive Employee Discounts & Perks offered through ADP and insurance
- Tuition Reimbursement
Similar Jobs
6 Days Ago
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
As a Senior Associate in Cyber Strategy, Risk & Compliance, you will analyze complex cybersecurity problems, mentor junior team members, and develop AI-driven cybersecurity solutions while collaborating with clients and stakeholders.
Top Skills:
Ai/Ml FrameworksAWSCi/CdDockerGCPKubernetesPython
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
As a Senior Associate in Cyber Strategy, Risk & Compliance, you'll analyze problems, mentor junior members, deliver AI-enabled cybersecurity solutions, and build client relationships.
Top Skills:
AIData Analytics
.jpg)
AdTech • Cloud • Marketing Tech • Productivity • Software • Analytics • Automation
The Senior Regional Partner Manager will establish and manage relationships with partners, driving revenue and developing solutions while nurturing cooperation between executives and teams.
Top Skills:
CloudCommerceDigital Experience PlatformsDrupalPaasSaaSSoaSocial SoftwareWcm
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
