Info Security Governance Analyst

About the role

The Information Security Governance Analyst will support RSM’s information security program by managing audits, vendor and client due‑diligence, and security awareness initiatives. This role ensures the organization’s security posture aligns with regulatory and client expectations.

Key responsibilities

• Liaise, plan and coordinate information security audits, work with auditors and control owners, conduct mock‑audits and report risks.
• Review vendor security questionnaires, write assessment reports and communicate risks to business contacts.
• Respond to client security questionnaires, RFPs and information requests.
• Maintain and update security policies, standards, procedures and related documentation.
• Manage phishing tests, security awareness course content and report delinquencies.

Required profile

• Bachelor’s degree in cyber security, information systems or related field, or equivalent experience.
• 2+ years of information security experience, including 1+ year performing vendor security assessments.
• Excellent written and oral communication skills, with ability to translate technical terms for non‑technical audiences.

Required skills

• Critical and structured thinking with formal analytic methods.
• Solid understanding of security applied to operating systems, applications, networking, cloud and mobile environments.
• Ability to work under pressure, manage multiple priorities and work independently.