Riveron

Lead financial and operational analysis, develop strategic plans, and manage client deliverables for distressed companies. | Requires 7+ years in finance with advanced Excel skills, financial modeling, distressed company analysis, and client relationship management. | When faced with unexpected challenges or periods of distress, companies need to make fast, informed decisions and implement straightforward solutions to get back on track. Our experienced professionals quickly stabilize the business, diagnose the issues, and create a strategic plan that will drive the best possible outcomes for the company and stakeholders. Whether seeking to preserve capital, improve cash flow, or restore earnings, we draw on our proven solutions, industry depth, and operational expertise to implement the change our clients need. Our Restructuring and Turnaround services include Performance Improvement, Restructuring & Turnaround Advisory, Interim Management, and Bankruptcy & Fiduciary. Industries we serve include Aerospace, Defense, & Government Contractors, Automotive & Industrials, Business Services, Consumer Products & Retail, Energy, Engineering & Construction, Financial Services, Government, Municipal, & Education, Healthcare, Hospitality & Entertainment, Real Estate, Technology, Media & Telecommunications. Who You Are • Bachelor’s or Master’s in Accounting, Finance, Economics, or related field of study • Minimum 7 years of finance, accounting, or related experience • Extensive experience with Microsoft Excel, including conditional formatting, lookup formulas, pivot tables, protecting files, creating scenario and what-if analyses, modifying options, and applying data validation to worksheets • Experience related to direct cash flow forecasting that integrates with income statement and balance sheet, running sensitivity analysis, advanced financial analysis, and account reconciliation • Experience with automating processes, improving controls, valuation analysis of distressed companies using EBITDA multiples and discounted cash flow • Experience related to distressed companies’ financial analysis/recommendation, bankruptcy/reorganization, and strategic growth consulting and analysis • You have a passion for developing and maintaining client relationships • You get the job done and have fun doing it • You have experience working with large, imperfect data sets • You readily identify problems and instinctively look for solutions • You demonstrate analytical rigor and strong written and verbal communication skills • You thrive in an ever-changing, dynamic work environment • You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events • You have the ability and desire to travel as required based on client location What You'll Do • Use financial and/or operational acumen to provide solutions to interested parties in situations related to underperforming, distressed, or bankrupt businesses • Oversee research, data and financial analysis, and development of financial models, reports, presentations, and other client-facing deliverables • Assist in developing engagement strategy and scoping client deliverables • Establish expectations for project team members, lead select client communication, own project workstreams, and ensure deadlines are met • Participate actively in the development of junior team members by providing coaching and performance feedback, and fostering a team-based working culture Applications for this evergreen opportunity will be accepted through Dec 31, 2026. About Riveron At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Want to stay connected with Riveron? Join our Talent Community to learn more about our growing firm and be considered for future opportunities. Check Us Out On Social Media LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. Compensation Range: $150K - $205K

Lead design and implementation of cybersecurity programs, mentor team members, and manage client security solutions. | 5+ years cybersecurity/cloud security engineering with multi-cloud expertise, knowledge of zero-trust, compliance frameworks, and relevant certifications. | In today's dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment. Our work spans the full security lifecycle, from program strategy and risk advisory to compliance readiness and hands-on remediation. We serve startups, mid-market companies, and PE-backed portfolios at any stage of their security journey, across a wide range of industries and regulatory environments. The Cybersecurity Engineering Lead is a key delivery role within the practice. You will protect our clients' digital assets from ever-evolving cyber threats, be responsible for designing, implementing, and maintaining security solutions that safeguard sensitive data and infrastructure. You will work closely with senior practice leadership, mentor junior team members, and contribute across our cybersecurity engineering, GRC, and security strategy teams as engagement needs evolve. This is a role for someone who enjoys variety, takes ownership naturally, and wants to grow in a client-facing advisory environment. What You Have • 5+ years in cybersecurity or cloud security engineering, with hands-on experience across at least two major cloud providers (AWS, Google Cloud Platform, Azure). • Expertise in zero-trust architecture, cloud networking, container security (Kubernetes, Docker), secrets management, vulnerability management, and data protection across multi-cloud environments. • Understanding of compliance frameworks and cloud-native threat models. • Relevant credentials such as AWS Certified Security - Specialty, Google Cloud Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or CISSP preferred. Who You Are • You take ownership of your work and your client relationships. You bring people along rather than waiting to be told what to do. • You think about security in terms of business impact, not just technical controls. • You are adaptable. You can move between an engineering, strategy, compliance, or technical architecture conversation without losing your footing. • You are a natural collaborator. You work well across teams, and you make the people around you better. • You are curious and motivated to keep growing. The security landscape moves fast, and you stay with it. • You enjoy being part of something bigger, including recruiting, training, firm events, and building a practice that stands out in the market. What You'll Do • Threat Detection & Response: Monitor and analyze security telemetry across platforms using Azure Sentinel, AWS GuardDuty/CloudTrail, and Google Cloud Logging. Investigate alerts, respond to incidents, and tune detection rules for multi-cloud environments. • Identity and Access Management: Design and implement identity solutions across multi-cloud environments including Azure Entra ID / AWS IAM / Google Cloud Platform Identity and Access Management, Role-Based Access Control (RBAC), and Privileged Access Management (PAM). Enforce least-privilege principles and zero-trust identity frameworks. • Security Posture & Compliance: Deploy and maintain cloud-native security tools-Microsoft Defender for Cloud, AWS Security Hub, and Google Cloud Security Command Center-to enforce security baselines, detect misconfigurations, and maintain regulatory compliance (SOC 2, ISO 27001, PCI-DSS, HIPAA). • Cloud Infrastructure Security: Secure cloud networking, data encryption, and workload protection across Azure (NSGs, Application Gateways), AWS (Security Groups, NACLs, VPC), and Google Cloud Platform (VPCs, Cloud Armor, Firewall Rules) and CSPM Platforms. Implement encryption, DLP, and data residency controls. • Automation & DevSecOps: Embed security controls into CI/CD pipelines using Infrastructure-as-Code (Terraform, CloudFormation, Deployment Manager) and scripting (Python, Bash, PowerShell). Automate compliance scanning and remediation across all three clouds. • AI-Accelerated Internal Tooling & Innovation: Develop and enhance internal security tools and automation frameworks using AI platforms such as Claude, GitHub Copilot, and other LLM technologies. Leverage generative AI to accelerate code generation, security script development, threat analysis automation, and documentation, enabling faster iteration on security solutions and driving continuous innovation across the security program. About Riveron: At Riveron, we partner with clients-from global multinationals to high-growth private entities-to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Want to stay connected with Riveron? Join our Talent Community to learn more about our growing firm and be considered for future opportunities. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Design, implement, and maintain security solutions protecting multi-cloud client assets with threat detection and compliance automation. | 5+ years cybersecurity or cloud security engineering experience with expertise in two major cloud providers and relevant certifications. | In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment. Our work spans the full security lifecycle, from program strategy and risk advisory to compliance readiness and hands-on remediation. We serve startups, mid-market companies, and PE-backed portfolios at any stage of their security journey, across a wide range of industries and regulatory environments. The Cybersecurity Engineering Lead is a key delivery role within the practice. You will protect our clients' digital assets from ever-evolving cyber threats, be responsible for designing, implementing, and maintaining security solutions that safeguard sensitive data and infrastructure. You will work closely with senior practice leadership, mentor junior team members, and contribute across our cybersecurity engineering, GRC, and security strategy teams as engagement needs evolve. This is a role for someone who enjoys variety, takes ownership naturally, and wants to grow in a client-facing advisory environment. What You Have 5+ years in cybersecurity or cloud security engineering, with hands-on experience across at least two major cloud providers (AWS, GCP, Azure). Expertise in zero-trust architecture, cloud networking, container security (Kubernetes, Docker), secrets management, vulnerability management, and data protection across multi-cloud environments. Understanding of compliance frameworks and cloud-native threat models. Relevant credentials such as AWS Certified Security – Specialty, Google Cloud Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or CISSP preferred. Who You Are You take ownership of your work and your client relationships. You bring people along rather than waiting to be told what to do. You think about security in terms of business impact, not just technical controls. You are adaptable. You can move between an engineering, strategy, compliance, or technical architecture conversation without losing your footing. You are a natural collaborator. You work well across teams, and you make the people around you better. You are curious and motivated to keep growing. The security landscape moves fast, and you stay with it. You enjoy being part of something bigger, including recruiting, training, firm events, and building a practice that stands out in the market. What You'll Do Threat Detection & Response: Monitor and analyze security telemetry across platforms using Azure Sentinel, AWS GuardDuty/CloudTrail, and Google Cloud Logging. Investigate alerts, respond to incidents, and tune detection rules for multi-cloud environments. Identity and Access Management: Design and implement identity solutions across multi-cloud environments including Azure Entra ID / AWS IAM / GCP Identity and Access Management, Role-Based Access Control (RBAC), and Privileged Access Management (PAM). Enforce least-privilege principles and zero-trust identity frameworks. Security Posture & Compliance: Deploy and maintain cloud-native security tools—Microsoft Defender for Cloud, AWS Security Hub, and Google Cloud Security Command Center—to enforce security baselines, detect misconfigurations, and maintain regulatory compliance (SOC 2, ISO 27001, PCI-DSS, HIPAA). Cloud Infrastructure Security: Secure cloud networking, data encryption, and workload protection across Azure (NSGs, Application Gateways), AWS (Security Groups, NACLs, VPC), and GCP (VPCs, Cloud Armor, Firewall Rules) and CSPM Platforms. Implement encryption, DLP, and data residency controls. Automation & DevSecOps: Embed security controls into CI/CD pipelines using Infrastructure-as-Code (Terraform, CloudFormation, Deployment Manager) and scripting (Python, Bash, PowerShell). Automate compliance scanning and remediation across all three clouds. AI-Accelerated Internal Tooling & Innovation: Develop and enhance internal security tools and automation frameworks using AI platforms such as Claude, GitHub Copilot, and other LLM technologies. Leverage generative AI to accelerate code generation, security script development, threat analysis automation, and documentation, enabling faster iteration on security solutions and driving continuous innovation across the security program. About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Want to stay connected with Riveron? Join our Talent Community to learn more about our growing firm and be considered for future opportunities. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead cybersecurity strategy execution and client advisory while mentoring junior staff. | Bachelor's degree and 5+ years cybersecurity consulting experience with proficiency in NIST CSF and ISO 27001, certifications like CISM preferred. | Security risk is a business problem. At Riveron, our Cybersecurity practice helps organizations understand their risk, make confident decisions, and build security programs that hold up under real pressure. We partner with business leaders, boards, and technical teams to deliver advisory and execution that is practical, credible, and tied to what matters to the organization. Our work spans the full security lifecycle, from program strategy and risk advisory to compliance readiness and hands-on remediation. We serve startups, mid-market companies, and PE-backed portfolios at any stage of their security journey, across a wide range of industries and regulatory environments. The Cybersecurity Strategy Lead is a key delivery role within the practice. This person leads project execution across client engagements, serves as the primary day-to-day client contact, and represents the firm with professionalism while leading conversations at any level of the organization. You will work closely with senior practice leadership, mentor junior team members, and contribute across our cybersecurity strategy, GRC, and security engineering teams as engagement needs evolve. This is a role for someone who enjoys variety, takes ownership naturally, and wants to grow in a client-facing advisory environment. What You Have Bachelor's degree in Cybersecurity, Computer Information Systems, or a related field. 5+ years of experience in cybersecurity consulting, advisory services, or a client-facing security role. Hands-on experience delivering security assessments, risk advisory, or program development engagements. Familiarity with common cybersecurity frameworks including NIST CSF, ISO 27001, HIPAA, SOC 2, and PCI-DSS. Strong written and verbal communication skills with experience presenting to senior business and technical stakeholders. Technical familiarity with one or more security domains such as cloud security, identity and access management, security operations, or data protection is a plus. Relevant certification preferred, such as CISSP, CISM, CISA, or equivalent. Bonus experience: Hands-on tooling experience in either Cloud Security, DevSecOps, Vulnerability Management, End Point Security, or Log Management. Who You Are You take ownership of your work and your client relationships. You bring people along rather than waiting to be told what to do. You communicate well across audiences. You are as comfortable in a working session with an engineer as you are presenting to a CISO or CFO. You think about security in terms of business impact, not just technical controls. You are adaptable. You can move between a strategy, compliance, and a technical architecture conversation without losing your footing. You are a natural collaborator. You work well across teams, and you make the people around you better. You are curious and motivated to keep growing. The security landscape moves fast, and you stay with it. You enjoy being part of something bigger, including recruiting, training, firm events, and building a practice that stands out in the market. What You'll Do Lead day-to-day project execution across cybersecurity strategy and advisory engagements, keeping work on track and clients well informed. Serve as the primary client contact throughout engagements, managing expectations, communicating progress, and building trust with stakeholder teams. Facilitate workshops, discovery sessions, and working meetings with client teams including senior technical and business leadership. Deliver high-quality work product including assessment reports, risk analyses, program roadmaps, and executive presentations. Support security maturity assessments, gap analyses, vCISO advisory engagements, and bespoke security program projects. Contribute to scoping discussions and proposal development under the guidance of practice leadership. Collaborate with Riveron's GRC and Security Engineering teams to support engagements that require a broader set of capabilities. Lead client status updates and reporting to keep stakeholders aligned between engagements. Support business development by identifying expansion opportunities within existing client relationships. Review and provide feedback on the work of Senior Associates and Associates, supporting their professional development. Contribute to internal practice development such as methodology, templates, and delivery frameworks. Stay current on the evolving threat landscape, emerging frameworks, and security tooling relevant to our clients. Participate in recruiting, internal training, and thought leadership initiatives that contribute to the growth of the practice. About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead FedRAMP and CMMC compliance initiatives, design secure cloud architectures, and manage compliance documentation and controls. | Bachelor's or postgraduate degree with over 5 years of FedRAMP or CMMC compliance experience and deep knowledge of NIST frameworks and cloud platforms. | In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment. The Manager level position for Riveron’s CSA group will work collaboratively with senior team members and provide guidance, coaching, and direction. Managers are expected to conduct the majority of day-to-day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and mentoring Senior Associates and Associates. In this role, you will own complex FedRAMP and CMMC initiatives end-to-end—guiding clients from readiness through authorization by designing, implementing, and validating secure cloud architectures across AWS, Azure, and GCP. You’ll operate as a trusted technical advisor, translating federal and DoD security requirements into practical, scalable solutions. This is a hands-on consulting role for senior practitioners who want real ownership, deep technical work, and visible impact. What You Have: Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field 5+ years of deep, demonstrable experience in FedRAMP and/or CMMC compliance efforts in real-world environments Deep understanding of NIST 800-53 and NIST 800-171 control frameworks Demonstrated knowledge of other compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner Familiarity with GRC solutions, tools, and technologies Who You Are: You have a passion for developing and maintaining client relationships You get the job done and have fun doing it You communicate skillfully with a variety of audiences and can create compelling stories from data You thrive in an ever-changing, dynamic work environment You readily identify problems and instinctively look for solutions You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events What You’ll Do: Lead FedRAMP Moderate and CMMC readiness assessments, including system boundary validation and control gap analysis Design and implement cloud security architectures aligned to NIST 800-53 and NIST 800-171 requirements Develop and own System Security Plans (SSPs), control narratives, and compliance documentation Partner closely with client engineering, security, and compliance teams to remediate gaps and implement controls Drive implementation of technical security measures such as encryption, IAM, logging, continuous monitoring, vulnerability management, and incident response Advise clients on federal and DoD security mandates, including cryptographic requirements and vulnerability remediation timelines Update and align security policies and procedures to support FedRAMP and CMMC compliance Conduct preliminary control testing to validate effectiveness prior to formal assessments Coordinate with Third-Party Assessment Organizations (3PAOs) and C3PAOs during independent assessments Support assessment execution, evidence collection, remediation cycles, and authorization package submission Mentor and review work from other consultants, raising the bar on technical quality and delivery Conduct interviews with prospective team members, assessing candidate suitability while serving as a brand ambassador for the CSA practice and Riveron Stay current on emerging risks and evolving control practices Build and maintain strong industry relationships to support long-term business development About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead FedRAMP and CMMC readiness assessments and compliance efforts, design cloud security architectures, and mentor consultants. | Requires 5+ years FedRAMP/CMMC experience, knowledge of NIST frameworks, relevant certifications, and a bachelor's degree in IT or related field. | Job Description: • Lead FedRAMP Moderate and CMMC readiness assessments, including system boundary validation and control gap analysis • Design and implement cloud security architectures aligned to NIST 800-53 and NIST 800-171 requirements • Develop and own System Security Plans (SSPs), control narratives, and compliance documentation • Partner closely with client engineering, security, and compliance teams to remediate gaps and implement controls • Drive implementation of technical security measures such as encryption, IAM, logging, continuous monitoring, vulnerability management, and incident response • Advise clients on federal and DoD security mandates, including cryptographic requirements and vulnerability remediation timelines • Update and align security policies and procedures to support FedRAMP and CMMC compliance • Conduct preliminary control testing to validate effectiveness prior to formal assessments • Coordinate with Third-Party Assessment Organizations (3PAOs) and C3PAOs during independent assessments • Support assessment execution, evidence collection, remediation cycles, and authorization package submission • Mentor and review work from other consultants, raising the bar on technical quality and delivery • Conduct interviews with prospective team members, assessing candidate suitability while serving as a brand ambassador for the CSA practice and Riveron • Stay current on emerging risks and evolving control practices • Build and maintain strong industry relationships to support long-term business development Requirements: • Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field • 5+ years of deep, demonstrable experience in FedRAMP and/or CMMC compliance efforts in real-world environments • Deep understanding of NIST 800-53 and NIST 800-171 control frameworks • Demonstrated knowledge of other compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS • Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner • Familiarity with GRC solutions, tools, and technologies. Benefits: • Full range of benefits including medical, dental, and vision insurance • 401(k) with company match • PTO

Lead FedRAMP and CMMC assessments, design cloud security aligned with NIST standards, manage compliance documentation, and mentor consultants. | Requires 5+ years experience in FedRAMP/CMMC compliance, deep knowledge of NIST frameworks, relevant certifications like CISM, and familiarity with GRC tools. | Job Description: • Lead FedRAMP Moderate and CMMC readiness assessments, including system boundary validation and control gap analysis • Design and implement cloud security architectures aligned to NIST 800-53 and NIST 800-171 requirements • Develop and own System Security Plans (SSPs), control narratives, and compliance documentation • Partner closely with client engineering, security, and compliance teams to remediate gaps and implement controls • Drive implementation of technical security measures such as encryption, IAM, logging, continuous monitoring, vulnerability management, and incident response • Advise clients on federal and DoD security mandates, including cryptographic requirements and vulnerability remediation timelines • Update and align security policies and procedures to support FedRAMP and CMMC compliance • Conduct preliminary control testing to validate effectiveness prior to formal assessments • Coordinate with Third-Party Assessment Organizations (3PAOs) and C3PAOs during independent assessments • Support assessment execution, evidence collection, remediation cycles, and authorization package submission • Mentor and review work from other consultants, raising the bar on technical quality and delivery • Conduct interviews with prospective team members, assessing candidate suitability while serving as a brand ambassador for the CSA practice and Riveron • Stay current on emerging risks and evolving control practices • Build and maintain strong industry relationships to support long-term business development Requirements: • Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field • 5+ years of deep, demonstrable experience in FedRAMP and/or CMMC compliance efforts in real-world environments • Deep understanding of NIST 800-53 and NIST 800-171 control frameworks • Demonstrated knowledge of other compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS • Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner • Familiarity with GRC solutions, tools, and technologies. Benefits: • Full range of benefits including medical, dental, and vision insurance • 401(k) with company match • PTO

Lead FedRAMP and CMMC compliance initiatives, design secure cloud architectures, manage client relationships, and mentor consultants. | 5+ years experience in FedRAMP/CMMC compliance, knowledge of NIST 800-53/171, relevant certifications like CISM, and strong client communication skills. | In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, design and maintenance of critical security domains, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment. The Manager level position for Riveron’s CSA group will work collaboratively with senior team members and provide guidance, coaching, and direction. Managers are expected to conduct the majority of day-to-day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and mentoring Senior Associates and Associates. In this role, you will own complex FedRAMP and CMMC initiatives end-to-end—guiding clients from readiness through authorization by designing, implementing, and validating secure cloud architectures across AWS, Azure, and GCP. You’ll operate as a trusted technical advisor, translating federal and DoD security requirements into practical, scalable solutions. This is a hands-on consulting role for senior practitioners who want real ownership, deep technical work, and visible impact. What You Have: • Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field • 5+ years of deep, demonstrable experience in FedRAMP and/or CMMC compliance efforts in real-world environments • Deep understanding of NIST 800-53 and NIST 800-171 control frameworks • Demonstrated knowledge of other compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS • Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner • Familiarity with GRC solutions, tools, and technologies Who You Are: • You have a passion for developing and maintaining client relationships • You get the job done and have fun doing it • You communicate skillfully with a variety of audiences and can create compelling stories from data • You thrive in an ever-changing, dynamic work environment • You readily identify problems and instinctively look for solutions • You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events What You’ll Do: • Lead FedRAMP Moderate and CMMC readiness assessments, including system boundary validation and control gap analysis • Design and implement cloud security architectures aligned to NIST 800-53 and NIST 800-171 requirements • Develop and own System Security Plans (SSPs), control narratives, and compliance documentation • Partner closely with client engineering, security, and compliance teams to remediate gaps and implement controls • Drive implementation of technical security measures such as encryption, IAM, logging, continuous monitoring, vulnerability management, and incident response • Advise clients on federal and DoD security mandates, including cryptographic requirements and vulnerability remediation timelines • Update and align security policies and procedures to support FedRAMP and CMMC compliance • Conduct preliminary control testing to validate effectiveness prior to formal assessments • Coordinate with Third-Party Assessment Organizations (3PAOs) and C3PAOs during independent assessments • Support assessment execution, evidence collection, remediation cycles, and authorization package submission • Mentor and review work from other consultants, raising the bar on technical quality and delivery • Conduct interviews with prospective team members, assessing candidate suitability while serving as a brand ambassador for the CSA practice and Riveron • Stay current on emerging risks and evolving control practices • Build and maintain strong industry relationships to support long-term business development About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Want to stay connected with Riveron? Join our Talent Community to learn more about our growing firm and be considered for future opportunities. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead enterprise-level digital transformation initiatives involving multi-team coordination and complex integrations. | Experienced in managing large-scale projects with executive stakeholder communication and vendor oversight, but lacks direct manufacturing or supply chain operational experience. | Today's manufacturing and distribution companies face increasing pressure to improve profitability, optimize cash flow, and create value in rapidly changing markets. Riveron partners with public and private organizations to improve business performance, align operating models for growth, and achieve strategic objectives. Our professionals combine executive leadership, deep functional expertise, and proprietary tools to identify operational improvement opportunities and implement lasting change. We focus on the operational and financial drivers that improve profitability, optimize spend, strengthen working capital, and enhance enterprise value. Riveron's Intelligent Manufacturing Solutions team partners with upper middle market and large-cap public and private companies, as well as private equity sponsors and their portfolio companies, to improve operating performance. We evaluate manufacturing operations, supply chain, procurement, distribution, SG&A, and commercial effectiveness to identify value creation opportunities. Through rigorous, fact-based analysis, we assess operational performance, identify key risks, quantify improvement opportunities, and help clients implement initiatives that deliver sustainable EBITDA improvement. Who You Are • 7+ years of combined industry and consulting experience, including at least 4 years focused on manufacturing and/or distribution operations. • Bachelor’s degree in Supply Chain, Operations, Engineering, or related field (MBA or APICS/ASCM certification preferred) • Previous advisory experience with a top-tier strategy firm, leading specialist or boutique advisory firm, or Big Four consulting firm preferred. • Experience working with private equity sponsors and portfolio companies. • Deep functional expertise in one or more of the following areas: • Supply Chain Operations • Manufacturing Operations and SIOP (Sales, Inventory & Operations Planning) • Footprint optimization, plant consolidation, and product line transfers • Lean Manufacturing, Six Sigma, Theory of Constraints (TOC), and Value Engineering • Experience working with executive leadership teams, including C-suite executives, private equity sponsors, and operating partners. • Strong analytical and problem-solving skills, including business process mapping, operational assessments, and quantitative analysis. • Experience leading organizational change and change management initiatives. • Ability and willingness to travel based on client needs. What You'll Do You will partner with client leadership and engagement teams to assess operations, identify value creation opportunities, and help clients execute initiatives that improve operational performance and financial results. You'll have the opportunity to work directly with private equity sponsors and portfolio company leadership, helping clients move quickly from operational assessment to execution and measurable value creation. Responsibilities Include • Assess manufacturing and distribution operations, including organizational design, production capacity, planning, quality, warehousing, and workforce capability. • Conduct current-state assessments of Sales, Operations, and Inventory Planning practices (SIOP/S&OP) to identify misalignment and gaps. • Analyze current and historical operational data to assess productivity, capacity utilization, equipment performance, maintenance practices, and production trends. • Facilitate cross-functional alignment workshops between commercial, operations, finance, and supply chain teams. • Drive integrated planning discussions that balance customer demand, supply constraints, and financial targets. • Build and refine inventory segmentation and control strategies (e.g., ABC/XYZ, lifecycle, service level tradeoffs). • Support design and implementation of perpetual inventory systems and controls. • Define and implement performance metrics for forecast accuracy, inventory turns, service levels, and working capital impact. • Translate operational improvements into financial outcomes — working capital reduction, cash flow improvement, and margin enhancement. • Develop practical transformation roadmaps that prioritize initiatives, establish key performance metrics, and identify implementation risks and mitigation strategies. • Support the execution of approved transformation initiatives by partnering with client leadership and cross-functional teams to deliver measurable operational and financial improvements. • Support and lead engagement teams while managing day-to-day client relationships and delivering high-quality work products and exceptional client service. About Riveron At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Check Us Out On Social Media LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. Compensation Range: $145K - $175K

Lead operational due diligence and performance improvement initiatives in manufacturing and industrial sectors. | Requires 5-8+ years in operations consulting with expertise in Lean or Six Sigma and strong financial acumen. | Today's manufacturing, distribution, and industrial businesses face increasing pressure to improve profitability, optimize cash flow, and create value in rapidly changing markets. Riveron partners with public and private organizations, private equity sponsors, and their portfolio companies to improve operational performance and drive measurable business results. Our professionals combine executive leadership, deep functional expertise, and proprietary tools to assess operations, identify value creation opportunities, and implement lasting operational improvements. We work alongside management teams to solve complex business challenges and deliver sustainable EBITDA growth. Our Process Improvement team specializes in operational due diligence, operational excellence, and performance improvement across manufacturing, distribution, and industrial businesses. We help clients rapidly identify operational risks, quantify value creation opportunities, and execute initiatives that improve productivity, cash flow, and enterprise value. Who You Are: 5-8+ years of experience in operations consulting, operational due diligence, operational excellence, or performance improvement within manufacturing, distribution, or industrial environments. Previous consulting experience with a top-tier strategy firm, leading specialist or boutique advisory firm, or Big Four consulting firm preferred. Experience working with private equity sponsors and portfolio companies. Experience supporting buy-side or sell-side operational due diligence engagements. Demonstrated ability to assess operational performance, identify improvement opportunities, and develop actionable implementation plans. Experience delivering measurable improvements in cost reduction, productivity, throughput, EBITDA, or working capital. Working knowledge of Lean Manufacturing, Six Sigma, Kaizen, Value Stream Mapping, Theory of Constraints (TOC), or similar operational excellence methodologies. Strong financial acumen with the ability to translate operational findings into financial impact. Experience working with executive leadership teams, including C-suite executives, private equity sponsors, and operating partners. Strong analytical, problem-solving, communication, and presentation skills. Ability and willingness to travel based on client needs. What You'll Do: You will partner with client leadership and engagement teams to evaluate operations, identify value creation opportunities, and help clients execute initiatives that improve operational performance and financial results. You'll work directly with private equity sponsors and portfolio company leadership, helping organizations move quickly from operational assessment to execution. Responsibilities include: Lead and support operational due diligence engagements for private equity buy-side, sell-side, and carve-out transactions. Assess manufacturing, supply chain, procurement, quality, maintenance, and distribution operations to identify operational risks and value creation opportunities. Evaluate operational scalability relative to investment theses and growth strategies. Develop fact-based value creation roadmaps, including 100-day plans, implementation priorities, and measurable KPIs. Conduct current-state operational assessments across production, labor productivity, planning, maintenance, quality, and procurement. Identify and support implementation of EBITDA improvement initiatives, including cost optimization, productivity improvement, working capital enhancement, and operational excellence programs. Analyze labor, overhead, and operating cost structures to develop business cases for operational investments, restructuring, footprint optimization, network optimization, and process redesign. Translate operational findings into clear, investment-focused recommendations for executive leadership, private equity sponsors, and investment committees. Support and lead engagement teams while managing day-to-day client relationships and delivering high-quality work products and exceptional client service. Help clients implement sustainable operating rhythms, governance processes, and performance management tools that About Riveron: At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office. Check us out on social media: LinkedIn Glassdoor Instagram Facebook Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits. Fraud Alert Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process. Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.