Who We Are:

risk3sixty is a bootstrapped, U.S.-based security and compliance firm that has run thousands of implementations and holds an 89 NPS in an industry that averages 57. No outside investors, no board, no PE exit pressure. The people our clients meet are the people doing the work. We help CISOs and GRC teams turn security and compliance from a scramble into a program they can stand behind.

The Role:

Associates on the ethOS team execute supervised tasks within projects while building foundational consulting skills. You will focus on learning the firm's way of working and delivering dependable, high-quality task-level outputs. This is an early-career seat designed to develop new and recent graduates into confident, capable consultants.

What You'll Do:

• Execute assigned tasks under guidance, meeting defined quality and timeline expectations.

• Keep project artifacts and task status up to date; communicate progress and blockers in a timely manner to the engagement lead.

• Follow documented processes, templates, and elite fundamentals.

• Incorporate feedback quickly and accurately.

• Support client interactions in a limited capacity, such as data gathering, note taking, and drafting materials.

External Audit Participation

Depending on business needs and qualifications, responsibilities may extend to participation in or ownership of external certification audit activities, contingent on meeting the applicable competence, training, and impartiality requirements defined by risk3sixty. When you are out on audits, you are an auditor-in-training under a qualified evaluator, and your on-site days are tracked as real progress toward becoming a qualified auditor.

How You'll Grow

This role is built to develop your communication skills, elite fundamentals, understanding of our offerings and their associated frameworks, and basic time management. You will work under close supervision at first, with increasing independence over time as you demonstrate growth in core skills and professionalism.

How Success is Measured:

• Task accuracy and timeliness.

• Responsiveness to direction and feedback.

• Demonstrated growth in core skills and professionalism.

• Bachelor's degree in information systems, Cybersecurity, Computer Science, Accounting or Audit, Business, Risk Management, or a related field, with graduation timed to a February 2027 start or relevant work experience

• Strong academic record; a GPA of 3.0 or higher is preferred.

• Familiarity with security and compliance concepts, with exposure to frameworks such as SOC 2, ISO 27001, or HITRUST through coursework, certification study, or a prior internship.

• Strong written and verbal communication skills.

• Attention to detail, reliability, and a track record of dependable, accurate work.

• Basic time management and organizational skills, and comfort working in software platforms and standard productivity tools.

• Coachable, quick to incorporate feedback, and professional in a client-adjacent setting.

• Authorized to work in the United States.

Plus:

• Awareness of AI governance concepts

• Prior internship or co-op experience in GRC, audit, security, or a related field

risk3sixty is an Equal Opportunity Employer. We are committed to building a team that reflects a range of backgrounds, perspectives, and experiences. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran status, pregnancy, or any other characteristic protected by applicable federal, state, or local law.

risk3sixty provides reasonable accommodations to qualified individuals with disabilities throughout the application and employment process. If you need an accommodation to participate in the application or interview process, please contact us and we will work with you to meet your needs.