Cyber Risk & Data Protection Consultant

RSM; Cedar Rapids (IA); On-site; USD 60,000 - 71,000; Full time

Job summary

RSM in Cedar Rapids is hiring a Consulting Associate for our Cyber Risk and Data Protection practice. You will join security and privacy teams to address client information security needs and participate in a structured training program that covers consulting processes, client engagement, and professional communication.

The role emphasizes analytics, risk assessment, and hands-on testing across networks, applications, and data protections, with opportunities to work with recognized credentialed

Qualifications

• Minimum BA/BS degree in a related field by start of employment
• Technical background in cybersecurity and computer science
• Strong knowledge of networks, forensics and threat intelligence
• Experience with programming or scripting (Perl/Python/C/Java/PHP)

Responsibilities

• Assess security of client networks, hosts, and applications
• Determine technical and business impact and remediation guidance
• Perform analysis and testing of mobile and web applications and services
• Conduct Internet penetration testing using blackbox/whitebox methods
• Review configurations and document findings for clients
• Measure compliance with industry or government requirements
• Identify leaked client data from Deep/Dark Web sources
• Investigate threats and campaigns and report clearly to non-technical audiences
• Support threat intelligence programs using established models
• Collaborate with RSM consulting professionals holding CEH, CISSP, CISA, CISM, CTIA credentials

Skills

Security fundamentals

Programming skills

Network technologies

Analytical/problem solving

Communication

Threat actor tracking

Education

BA/BS in CS or related field

Tools

AppScan

Metasploit

Burp Suite

Nessus

Kali Linux

Job description

RSM in Cedar Rapids is hiring a Consulting Associate for our Cyber Risk and Data Protection practice. You will join security and privacy teams to address client information security needs and participate in a structured training program that covers consulting processes, client engagement, and professional communication.

The role emphasizes analytics, risk assessment, and hands-on testing across networks, applications, and data protections, with opportunities to work with recognized credentialed