Cyber Risk & Data Protection Associate

RSM Canada Operations ULC; Toronto; On-site; CAD 62,000 - 74,000; Full time

Job summary

RSM Canada is seeking Consultants for our Cyber Risk and Data Protection practice in Toronto. You will join teams of security and privacy staff to assess risks, determine impacts, and guide remediation across ISO and NIST frameworks.

You’ll contribute to governance programs, help develop tools like eGRC, and report to executives as you build cyber security programs for clients in diverse industries. Training and career development are emphasized.

Qualifications

• Minimum Bachelor’s degree in Computer Science, Information Technology, Information Systems Management, Information Security or similar.
• Technical background in computer science and related fields.
• A 3.0 GPA is preferred.
• Ability to interpret and convey technical information to all levels of technical aptitude.

Responsibilities

• Conduct assessments to identify risks within cyber security governance and compliance programs.
• Determine technical and business impact of identified security issues and provide remediation guidance.
• Work with cyber security and privacy frameworks such as ISO, NIST, CIS.
• Measure and report clients’ compliance with PCI DSS, GDPR, CMMC, FEDRAMP, CCPA, etc.
• Contribute to development of security governance and compliance programs for clients.
• Support development and implementation of tools like eGRC to manage security programs.
• Develop metrics and reporting for security programs.
• Assist in presentations to executive management and Boards of Directors.
• Create target operating models for cyber security programs including budgets and resources.

Skills

Security governance

Communication skills

ISO/NIST knowledge

Threat assessment

Reporting

Education

Bachelor's degree in Computer Science or related field

GPA 3.0 preferred

Tools

Nessus

Kali Linux

eGRC tools

Job description

RSM Canada is seeking Consultants for our Cyber Risk and Data Protection practice in Toronto. You will join teams of security and privacy staff to assess risks, determine impacts, and guide remediation across ISO and NIST frameworks.

You’ll contribute to governance programs, help develop tools like eGRC, and report to executives as you build cyber security programs for clients in diverse industries. Training and career development are emphasized.