Advisory Manager - Cyber Strategy

RSM US LLP•New York, NY

2d•$107,000 - $214,500

About The Position

RSM is seeking a Cyber Strategy Advisory Manager to lead large-scale cybersecurity assessments, program transformations, and technology-enabled implementations for complex clients. The role combines cybersecurity expertise with disciplined program leadership to coordinate interdependent workstreams, align executive and delivery stakeholders, and turn strategic priorities into measurable outcomes. The Manager serves as a day-to-day client leader and is accountable for quality, scope, schedule, budget, risk, and outcomes while helping expand trusted client relationships. Experience supporting large financial services institutions and private equity sponsors or portfolio companies is strongly preferred. The Manager leads programs from mobilization through closeout and operational transition, integrating cybersecurity strategy, governance, risk and compliance, cloud, digital identity, data protection, resilience, security operations, and technology implementation workstreams. The role includes coordinating multidisciplinary teams, managing engagement economics, advising client executives, overseeing deliverables, and guiding clients from assessment and roadmap development through remediation, implementation, adoption, and sustainment. RSM offers a competitive benefits and compensation package and flexibility in scheduling to help employees balance life’s demands while serving clients. The compensation range is $107,000–$214,500, and selected candidates are eligible for a discretionary bonus based on firm and individual performance.

Requirements

Demonstrated experience leading large-scale, multi-workstream assessments, transformations, or implementations for large and complex organizations.
Ability to manage integrated program plans, budgets, resources, dependencies, risks, issues, deliverables, and executive reporting across concurrent workstreams.
Experience coordinating cross-functional teams that may include cybersecurity, technology, risk, compliance, internal audit, legal, privacy, business operations, and third-party vendors.
Strong cybersecurity advisory experience in areas such as cyber risk and maturity, governance and compliance, security program design, resilience, third-party risk, cloud security, digital identity, data protection, security operations, or GRC technology.
Working knowledge of major cybersecurity and regulatory frameworks, such as NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, FFIEC, GLBA, NYDFS Part 500, DORA, PCI DSS, HIPAA/HITECH, or HITRUST.
Ability to build trusted client relationships, manage challenging stakeholder dynamics, and communicate effectively with executive and technical audiences.
Experience managing engagement economics, including budgets, staffing, utilization, margin, scope changes, and resource allocation.
Excellent written, verbal, facilitation, and presentation skills, including the ability to translate technical issues into business risk, decisions, and action plans.
Ability to travel up to 30% based on client and engagement needs.

Nice To Haves

Bachelor's degree in cybersecurity, information systems, computer science, business, risk management, or a related field.
7–10 years of relevant cybersecurity, technology risk, consulting, or program delivery experience, including responsibility for complex client engagements.
Experience delivering cybersecurity programs for large financial services organizations, such as regional or global banks, insurers, asset managers, payments companies, or other regulated financial institutions.
Experience supporting private equity sponsors and portfolio companies, including cyber due diligence, post-close remediation, portfolio-wide assessments, program transformation, or recurring advisory services.
Experience leading enterprise-wide or multi-entity programs involving multiple business units, geographies, legal entities, portfolio companies, or regulatory jurisdictions.
Experience orchestrating cybersecurity technology implementations or complex remediation programs involving platforms such as ServiceNow, AuditBoard, Archer, MetricStream, OneTrust, SailPoint, CyberArk, Okta, Microsoft, AWS, or Azure.
Experience with project or program management methodologies and tools, including governance design, dependency management, benefits tracking, change management, and executive portfolio reporting.
Experience in a professional services firm, large consultancy, financial institution, private equity environment, or similarly complex client-service organization.
Ability to identify follow-on opportunities while maintaining a client-first focus on quality, outcomes, and long-term relationships.
CISSP, CISA, CISM, or comparable cybersecurity certification.
PMP, CAPM, PgMP, SAFe, Agile, or comparable program or project management certification.

Responsibilities

Lead large-scale, multi-workstream cybersecurity assessments, remediation programs, and implementations for complex clients from mobilization through closeout and operational transition.
Translate assessment findings into executable remediation plans and sustained programs for private equity sponsors, portfolio companies, M&A transactions, or complex multi-entity clients.
Develop and manage integrated plans spanning cybersecurity strategy, governance, risk and compliance, cloud, digital identity, data protection, resilience, security operations, and technology implementation.
Orchestrate teams across RSM, client functions, vendors, and geographically distributed delivery centers; establish governance, roles, dependencies, decision rights, and escalation paths.
Serve as the primary day-to-day client leader, building trusted relationships with CISOs, CIOs, risk and compliance leaders, program sponsors, and workstream owners.
Translate executive objectives into workplans, milestones, resource requirements, budgets, success measures, and executive reporting.
Manage program scope, financial performance, staffing, schedule, quality, risks, issues, dependencies, and change control; identify delivery threats and drive corrective action.
Integrate findings across assessments, frameworks, business units, technologies, and workstreams into a cohesive view of risk, priorities, and implementation sequencing.
Lead executive steering committee meetings, program status reviews, decision forums, workshops, and readouts, communicating technical and regulatory matters in business terms.
Guide clients from assessment and roadmap development through control design, remediation, implementation, adoption, and sustainment.
Oversee deliverables such as program charters, integrated plans, risk and issue logs, executive dashboards, roadmaps, target operating models, implementation plans, and governance materials.
Partner with the engagement Director to identify emerging client needs, develop next-phase plans, and ensure disciplined handoffs from assessment to remediation or ongoing support.
Coach and develop engagement teams, delegate effectively, provide timely feedback, and build repeatable program delivery practices.