We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.
About us
To address the most critical needs of our clients, RSM US LLP established the Cyber group, comprised of more than 300 professionals dedicated exclusively to serving the cybersecurity needs of our clients. This group includes experienced consultants located throughout the United States, United Kingdom, Canada, El Salvador, and India dedicated to helping clients with preventing, detecting, responding, and recovering to security threats that may affect their critical systems and data. We serve a diverse client base within a variety of industries, and we are relied upon to provide expertise across the full suite of security and privacy capabilities including managing the daily activities associated with our clients’ security operations.
The position
As GRC Director, you will help architect RSM’s GRC program and technology implementation products and oversee sales pursuits and program delivery for clients across a range of industries and geographic locations. The ideal candidate will have hands‑on experience implementing GRC modules—such as Policy Management, Risk Management, Compliance Management, Issue Management, and Third‑Party Risk Management—on leading GRC platforms including ServiceNow. Candidates should also have demonstrated expertise in defining and building a second line‑of‑defense operating structure, and integrating client systems and telemetry to deliver actionable risk and compliance insights. Experience with API‑led integration strategies and intelligent automation (AI/ML), and the ability to apply these capabilities in an operational environment, is highly preferred.
A successful GRC Director will direct a geographically disbursed team of security personnel across our global footprint. You will move clients beyond manual compliance to a model of dynamic and predictive compliance and risk intelligence. This role ensures our clients operational foundational areas (unified controls taxonomies), effectively identify and mitigate risks, and integrate as well as automate control and risk evidence gathering and analysis across our service delivery.
Key Responsibilities
Business Development
- Leverage your existing network and personal brand in the marketplace to drive growth, which includes identifying and securing new opportunities.
- Manage multiple client pursuits, while providing leadership on extending existing account opportunities as well as identifying new account relationships.
- Establish a network of internal and external relationships that lead to a sustained book of business and market related growth strategy.
- Support vendor channel in order to identify and growth practice
Client Experience
- Draw upon your demonstrated technical, compliance, and risk knowledge to become a trusted advisor to our clients.
- Provide expert guidance to team in implementation of GRC tools like ServiceNow, Archer, AuditBoard, OneTrust.
- Ability to assess and communicate regulatory, technology and risk considerations while leveraging cross functional teams to drive expertise through building internal talent and enabling our client experience.
- Communicate complex GRC technical issues to client senior management through the ability to transform such data to operations personnel and executive style reports and presentations.
- Enhance RSM’s capability to respond to high-profile client needs as it relates to significant, complex compliance remediation and/or program transformation.
- Engage with internal and external stakeholders to gather requirements, provide updates, and obtain approvals for solution designs and implementations.
- Manage project deliverables ensuring adherence to timelines and quality standards.
Talent Experience
- Effectively manage, motivate, and mentor multidisciplinary teams to work as a cohesive, client-centric unit in delivering high-quality solutions to sophisticated clients.
- Recruit and retain future leaders of the firm.
- Leverage your experience and expertise to advance the professional aspirations and skills of your colleagues.
Innovation, Operations & Culture
- Lead the development of innovative solutions and approaches to serving clients based on evolving technological tools and trends.
- Oversee a diverse book of business, maintaining overall responsibility for the profitability, effective delivery, and engagement risk of all client-related work within the portfolio.
- Responsibility for coordination of teams to enhance P&L success, including driving net services and managing to margin metrics
- Model the core RSM values of respect, integrity, teamwork, excellence, and stewardship in all interactions with clients and team members.
- Recruit and retain an inclusive diverse group of qualified leaders of the firm.
Professional Qualifications
- 10+ years of experience in GRC roles, preferably in second-line or assurance functions
- Strong technical knowledge in GRC Tools: ServiceNow (preferred), Archer, AuditBoard, OneTrust and other leading tools
- In-depth knowledge of the regulations and standards such as ISO 27001, NIST 800 Series, PCI-DSS, GPDR, HIPPA, etc.
- Successful track record of building and growing a GRC Technology practice.
- Proven demonstration of the ability to manage a marketing campaign to launch a new or expanded services.
- Demonstrates comprehensive knowledge and a proven record of success with identifying and obtaining new GRC service opportunities and taking the opportunities through the sales cycle.
- Demonstrates thorough abilities to identify and address client needs, including developing and sustaining meaningful client relationships and understand the client's business.
- Proven people skills demonstrate thorough knowledge and/or a proven track record of success with operating in a professional services firm or large consultancy.
- Excellent written, oral, presentation skills, innovative thinker
- A proven record of success working seamlessly in a virtual environment to complete projects with team members based in various locations, domestically and globally.
- Demonstrates creative thinking, individual initiative, and flexibility in prioritizing and completing tasks.
- Keeps up to date with the GRC technology innovations - following the industry's advancements, challenges, and discovery.
Preferred Qualifications
- Bachelor’s degree in Information Security, Risk Management, or related field.
- ServiceNow Certification: Certified System Administrator (CSA) (Mandatory) and one of other specialized certifications like Certified Implementation Specialist (CIS) in Security Operations (SecOps), Vendor Risk Management (VRM), and IRM (Integrated Risk Management).
- Certified Information Systems Security Professionals® (CISSP®); Certified Information Systems Auditor® (CISA®); Certified Information Security Manager® (CISM®); or equivalent security certifications.
- Experience with Microsoft tools such as Excel and PowerPoint.
- Delivery background with ITSM platforms such as ServiceNow, Jira, etc.
- Development and/or architecture experience with API connectors, data lake, or BI tools (e.g., PowerBI) for risk reporting) as well as automation and/or AI/ML services.
At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.
All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.
Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at careers@rsmus.com.
RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.
RSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information.
At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.
Compensation Range: $134,000 - $269,000
Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.
