Senior Associate - Cybersecurity & Data Protection Services

About the role

RSM is looking for a Senior Associate to join its Cyber practice, working with multinational commercial entities on cybersecurity frameworks and data protection requirements. The role focuses on helping organizations establish effective data protection programs and understand the cyber regulatory risks affecting multinational companies.

Key responsibilities

• Lead the delivery and management of cybersecurity engagements and team members, delivering high-quality work products that meet client expectations.
• Communicate with client management and project leaders to build strong client relationships and exceed satisfaction levels.
• Participate in cybersecurity governance and compliance assessments against standards such as FISMA, FedRAMP, CMMC, MARS-E, NYDFS, HIPAA/HITECH and NERC/CIP.
• Help clients design and implement remediation strategies, identifying suitable technologies, policies and organizational structures.
• Identify and communicate findings to senior management and clients, both in writing and verbally, and point out improvement opportunities.

Required profile

• 3+ years of relevant experience in cybersecurity governance and compliance consulting, or equivalent academic experience with an advanced degree.
• Proven track record in a professional services firm, large consultancy or similar environment.
• Strong interpersonal skills and demonstrated ability to collaborate with cross-functional teams.

Required skills

• Performing and overseeing cybersecurity governance assessments (NIST CSF, ISO, FedRAMP, FISMA, CMMC, MARS-E).
• Vulnerability assessments, penetration testing and incident response.
• Knowledge of network and IT infrastructure, application and database design, IT governance and risk management, third-party management and standard security components.
• Familiarity with standards such as ISO, FedRAMP, CMMC, NIST CSF and GLBA.
• Experience managing teams delivering SIEM, DLP and Identity Management deployments is highly desirable.

Preferred qualifications include a bachelor's degree in Information Technology, Computer Science or Cybersecurity, and certifications such as CISSP, CISM, CISA, CCP or CCA. The role offers a competitive benefits and compensation package and schedule flexibility.