Advisory Manager - Cyber Strategy

rsm; Toronto; On-site; CAD 140,000 - 190,000; Full time

Job summary

RSM is seeking a Cyber Strategy Advisory Manager to lead large-scale cybersecurity assessments, program transformations, and technology-enabled implementations for complex clients. This role blends cybersecurity expertise with disciplined program leadership to coordinate multiple workstreams, align stakeholders, and deliver measurable outcomes.

As day-to-day client leader, you will manage scope, budgets, risks, and executive reporting, while expanding trusted client relationships with CISOs,

Qualifications

• Experience leading large-scale, multi-workstream assessments and implementations for complex organizations.
• Ability to manage integrated program plans, budgets, resources, risks, issues, and executive reporting.
• Experience coordinating cross-functional teams across cybersecurity, risk, compliance, and vendors.
• Strong knowledge of cybersecurity advisory with governance, risk, and compliance, and security program design.
• Familiarity with major frameworks (NIST CSF, ISO 27001, PCI DSS, HIPAA/HITECH) and regulatory requirements.

Responsibilities

• Lead large-scale, multi-workstream cybersecurity assessments, remediation programs, and implementations for complex clients from mobilization through closeout.
• Experience leading cybersecurity advisory or transformation work for private equity sponsors, portfolio companies, M&A transactions, or complex multi-entity clients.
• Develop and manage integrated program plans spanning cybersecurity strategy, governance, risk and compliance, cloud, digital identity, data protection, resilience, security operations, and technology implementation workstreams.
• Orchestrate multidisciplinary teams across RSM, client functions, vendors, and geographically distributed delivery centers.
• Serve as the primary day-to-day client leader for complex programs, building trusted relationships with CISOs, CIOs, risk and compliance leaders, program sponsors, and workstream owners.
• Translate executive objectives into actionable workplans, milestones, resource requirements, budgets, success measures, and executive reporting.
• Manage program scope, financial performance, staffing, schedule, quality, risks, issues, dependencies, and change control.
• Integrate findings across assessments, frameworks, business units, technologies, and workstreams to produce a cohesive view of risk and priorities.
• Lead executive steering committee meetings, program status reviews, decision forums, workshops, and readouts.
• Guide clients from assessment and roadmap development through control design, remediation, implementation, adoption, and sustainment.
• Oversee development of high-quality deliverables, including program charters, integrated plans, risk logs, dashboards, roadmaps, operating models, and governance materials.
• Partner with the engagement Director to identify needs from delivery and ensure disciplined handoff from assessment to remediation or ongoing support.
• Coach and develop engagement teams, delegate effectively, and build repeatable program delivery practices.

Skills

Program management

Cybersecurity governance

Budget management

Cross-functional leadership

Executive reporting

Risk management

Stakeholder management

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

RSM is seeking a Cyber Strategy Advisory Manager to lead large-scale cybersecurity assessments, program transformations, and technology-enabled implementations for complex clients. This role combines cybersecurity domain knowledge with disciplined program leadership to orchestrate multiple interdependent workstreams, align executive and delivery stakeholders, and translate strategic priorities into measurable outcomes. The Manager will serve as a day-to-day client leader, maintain accountability for quality, scope, schedule, budget, risk, and outcomes, and help expand trusted client relationships. Experience supporting large financial services institutions and private equity sponsors or portfolio companies is strongly preferred.

Responsibilities

• Lead large-scale, multi-workstream cybersecurity assessments, remediation programs, and implementations for complex clients from mobilization through closeout and operational transition.
• Experience leading cybersecurity advisory or transformation work for private equity sponsors, portfolio companies, M&A transactions, or complex multi-entity clients, including translating assessment findings into executable remediation plans and sustained programs.
• Develop and manage integrated program plans spanning cybersecurity strategy, governance, risk and compliance, cloud, digital identity, data protection, resilience, security operations, and technology implementation workstreams.
• Orchestrate multidisciplinary teams across RSM, client functions, vendors, and geographically distributed delivery centers. Establish clear governance, roles, dependencies, decision rights, and escalation paths.
• Serve as the primary day-to-day client leader for complex programs, building trusted relationships with CISOs, CIOs, risk and compliance leaders, program sponsors, and workstream owners.
• Translate executive objectives into actionable workplans, milestones, resource requirements, budgets, success measures, and executive reporting.
• Manage program scope, financial performance, staffing, schedule, quality, risks, issues, dependencies, and change control. Identify delivery threats early and drive corrective action.
• Integrate findings across multiple assessments, frameworks, business units, technologies, and workstreams to produce a cohesive view of risk, priorities, and implementation sequencing.
• Lead executive steering committee meetings, program status reviews, decision forums, workshops, and readouts. Communicate complex technical and regulatory matters in clear business terms.
• Guide clients from assessment and roadmap development through control design, remediation, implementation, adoption, and sustainment rather than limiting delivery to point-in-time findings.
• Oversee the development of high-quality deliverables, including program charters, integrated plans, risk and issue logs, executive dashboards, roadmaps, target operating models, implementation plans, and governance materials.
• Partner with the engagement Director to identify needs emerging from delivery, develop practical next-phase plans, and ensure a disciplined handoff from assessment to remediation or ongoing support.
• Coach and develop engagement teams, delegate effectively, provide timely feedback, and build repeatable program delivery practices that improve quality and scalability.

Required Qualifications

• Demonstrated experience leading large-scale, multi-workstream assessments, transformations, or implementations for large and complex organizations.
• Proven ability to manage integrated program plans, budgets, resources, dependencies, risks, issues, deliverables, and executive reporting across concurrent workstreams.
• Experience coordinating cross-functional teams that may include cybersecurity, technology, risk, compliance, internal audit, legal, privacy, business operations, and third-party vendors.
• Strong cybersecurity advisory experience in areas such as cyber risk and maturity, governance and compliance, security program design, resilience, third-party risk, cloud security, digital identity, data protection, security operations, or GRC technology.
• Working knowledge of major cybersecurity and regulatory frameworks, such as NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, FFIEC, GLBA, NYDFS Part 500, DORA, PCI DSS, HIPAA/HITECH, HITRUST, or similar requirements.
• Demonstrated ability to build trusted client relationships, manage challenging stakeholder dynamics, and communicate effectively with executive and tec