Company Description

Founded by David and Catherine Gravel in 1994, GraVoc Associates, Inc. is a family-owned and operated consulting firm located in Peabody, Massachusetts. Since its inception, GraVoc has been committed to solving business problems for customers through the development, implementation, and support of technology-based solutions, including: software development – analysis, design, customization, and implementation of software applications; network infrastructure – LAN/WAN design, implementation and support services; security – risk management consulting, regulatory compliance, and IT assurance testing; web and media – web development, media production, and digital marketing. As a result, we are able to provide our customers with a single point of access to a comprehensive menu of services that meet all of their business process management needs.

As previously indicated, GraVoc is family-owned and operated—a dynamic that extends to include all of our employees. First and foremost, we are dedicated to the health, wellness, and prosperity of our employees and their families. Furthermore, we are committed to providing a fun, challenging, and rewarding work experience through which our employees and their families can thrive. While we, as a company, always aspire to grow and succeed, we do not let these objectives diminish our dedication to one another or to our customers.


Position Available: IT Security Consultant

We are seeking a dedicated individual with one (1) or more years of experience in IT, information security and/or regulatory compliance consulting. Candidates should have a Bachelor of Science degree in Information Technology, Computer Science, or a related discipline. Additionally, candidates will need strong communication skills (both written and verbal), and experience performing network security assessments, system hardening, vulnerability scans, and/or other cybersecurity related tasks. Knowledge of industry best practice standards such as NIST or CIS is required. Additional knowledge of relevant regulations such as GLBA, 201 CMR 17.00, and the regulatory guidelines published by the FFIEC is preferred.

Candidates will be responsible for performing the following:

  • Network penetration testing
  • Network vulnerability assessments
  • Risk assessments
  • IT audit
  • Strategic planning and consulting

Successful candidates will be prepared to travel when necessary and work closely with various clients in Massachusetts and throughout New England. Professional certifications for technical information security related skills (e.g. ethical hacking (CEH), offensive security certified professional (OSCP), or equivalent) are preferred but not required. Note that if the selected candidate does not have a relevant professional certification, he/she will be required to achieve an assigned certification during the first (1st) year of employment.

Fill out my online form.

Pin It on Pinterest

Share This