Information Security Governance Manager

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

The Information Security Governance Manager is the Information Security team lead in El Salvador, providing in-country oversight of Information Security personnel. The role leads information security governance, risk, and compliance activities, including vendor and client due diligence, security documentation, audits and assessments, and security awareness. The position also provides directions to assigned staff to ensure work aligns with established objectives, policies, and standards.

Essential Duties

• Manage Vendor Due Diligence: Manage Information Security vendor due diligence activities including reviewing the security posture of vendors and third parties, writing assessment reports, communicating risks to the Line of Business contacts, and tracking recommended actions and remediation.
• Manage Client Due Diligence Support: Prioritize and oversee responses to client security questionnaires, requests for proposals, and requests for information.
• Oversee Information Security Audits & Assessments: Liaise with internal and external auditors by coordinating scope, timelines, and evidence requests. Oversee security audit and assessment activities. Drive / prioritize remediation efforts, and report on potential risks
• Provide oversight and direction to assigned staff: Lead and develop assigned staff by setting priorities, clarifying requirements, and ensuring deliverables are completed accurately and on schedule. Provide coaching, quality review, and escalation support to ensure work aligns with established objectives, policies, and standards.
• Manage Information Security Program Documentation: Oversee updates to the information security policy, standards, procedures and related documentation. Provide subject matter expertise in the areas of security policies, standards and related compliance.
• Manage Security Awareness Content: Oversee updates to security awareness course content, periodic articles and report / escalate delinquencies.

Minimum Qualifications

EDUCATION/CERTIFICATIONS

• Bachelor’s degree in cyber security, information systems, or related field or equivalent level of experience
•    Relevant certification, e.g. CISSP, CISM (preferred)
• Master’s degree in relevant field (preferred)

TECHNICAL/SOFT SKILLS

• Critical and structured thinking, formal analytic methods
• Solid understanding of security applied to OS, applications, networking, cloud, mobile, etc.
• Ability to brief executives and a variety of stakeholders
• Ability to perform under pressure and handle multiple priorities
• Ability to self-motivate and work independently
• Strong organizational skills
• Good understanding of tax, assurance and consulting practices (preferred) 

EXPERIENCE

• 8 + years of information security experience
• 4-5+ years’ experience performing vendor security assessments / vendor due diligence, risk management and/or IT audits
• 1+ years management experience

COMMUNICATION SKILLS

• Excellent written and oral communication
• Ability to translate technical terms into layman’s terms (preferred)

LEADERSHIP SKILLS

• Strong leadership skills
• Excellent conflict resolution skills
• Excellent written and oral communication

At RSM, we offer a competitive benefits and compensation package for all our people.  We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.  Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits   https://rsmus.com/careers/el-salvador.html. 

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.  

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at [email protected].