Senior Associate - Risk Management Analyst

RSM US LLP • Harrisburg, PA

19h

About The Position

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. We are seeking a detail-oriented and analytical Risk Management Analyst to join our cybersecurity team. The ideal candidate will possess strong critical thinking skills and a proactive approach to identifying, assessing, and mitigating vulnerabilities within clients’ systems and networks. This role is essential in ensuring the security and integrity of our clients’ information assets and will involve collaboration with various teams to enhance their overall security posture.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3-5 years of experience in information technology, cybersecurity, or a related field.
• Strong understanding of vulnerability assessment tools and methodologies (e.g., Nessus, Qualys, Rapid7).
• Experience with data analytics platforms (eg. PowerBI) and structured data sets.
• Excellent critical thinking and problem-solving skills, with the ability to analyze complex situations and make sound decisions.
• Strong communication skills, both written and verbal, with the ability to convey technical information to non-technical stakeholders.

Nice To Haves

• Experience with cloud platforms (AWS, Azure) is a plus.
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls) is a plus.
• Relevant certifications (e.g., Sec+, AWS Cloud Practitioner) are a plus.

Responsibilities

• Conduct regular vulnerability assessments and scans to identify potential security weaknesses in systems, applications, and networks.
• Administer vulnerability management and automated patching SaaS applications.
• Analyze and prioritize vulnerabilities based on risk assessment, potential impact, and exploitability, utilizing critical thinking to make informed decisions.
• Collaborate with managed and client IT teams to support remediation of identified vulnerabilities.
• Collaborate with SOC, engineering, and service delivery teams to respond to requests and help advise on various technical matters including vulnerabilities, emerging threats and technologies, and solutions for common problems related to current processes.
• Monitor and evaluate emerging threats in the cybersecurity landscape, adapting strategies as necessary.
• Develop and maintain documentation related to vulnerability management processes, findings, and remediation efforts.
• Prepare and present reports on vulnerability status, trends, and remediation progress to stakeholders, using clear and concise communication.
• Assist in the development and implementation of security policies, standards, and procedures related to vulnerability management and patching.
• Participate in incident response activities as needed, providing insights and analysis to support investigations.
• Leverage data analytics platforms to create reports, query emerging threats and analyze trends to help minimize risk and improve posture across a large client base.

Benefits

• At RSM, we offer a competitive benefits and compensation package for all our people.
• We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.
• Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees