Information Security Governance Analyst

About the role

The Information Security Governance Analyst supports RSM’s information security program by managing governance, risk, and compliance activities. You will work closely with auditors, vendors, and internal stakeholders to ensure the organization’s security posture meets client and regulatory expectations.

Key responsibilities

• Liaise with auditors and control owners to plan, coordinate, and execute information security audits, gather evidence, drive remediation, and report risks.
• Conduct mock‑audits and control reviews, communicating the effectiveness of security controls to leadership.
• Review vendor security questionnaires, write assessment reports, and communicate risks to business lines.
• Respond to client security questionnaires, RFPs, and information requests.
• Maintain and update information security policies, standards, procedures, and related documentation.
• Manage security awareness initiatives, including phishing tests, course content updates, and reporting delinquencies.

Required profile

• Bachelor’s degree in cyber security, information systems, or a related field, or equivalent experience.
• 2+ years of information security experience, with at least 1 year performing vendor security assessments.
• Strong analytical thinking, ability to work under pressure, and excellent written communication skills.

Required skills

• Understanding of security applied to operating systems, applications, networking, cloud, and mobile environments.