We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. RSM is seeking a Cyber Strategy Advisory Manager to lead large-scale cybersecurity assessments, program transformations, and technology-enabled implementations for complex clients. This role combines cybersecurity domain knowledge with disciplined program leadership to orchestrate multiple interdependent workstreams, align executive and delivery stakeholders, and translate strategic priorities into measurable outcomes.

The Manager will serve as a day-to-day client leader, maintain accountability for quality, scope, schedule, budget, risk, and outcomes, and help expand trusted client relationships.

Experience supporting large financial services institutions and private equity sponsors or portfolio companies is strongly preferred. Lead large-scale, multi-workstream cybersecurity assessments, remediation programs, and implementations for complex clients from mobilization through closeout and operational transition.

Experience leading cybersecurity advisory or transformation work for private equity sponsors, portfolio companies, M&A; transactions, or complex multi-entity clients, including translating assessment findings into executable remediation plans and sustained programs. Develop and manage integrated program plans spanning cybersecurity strategy, governance, risk and compliance, cloud, digital identity, data protection, resilience, security operations, and technology implementation workstreams. Serve as the primary day-to-day client leader for complex programs, building trusted relationships with CISOs, CIOs, risk and compliance leaders, program sponsors, and workstream owners.

Manage program scope, financial performance, staffing, schedule, quality, risks, issues, dependencies, and change control. Integrate findings across multiple assessments, frameworks, business units, technologies, and workstreams to produce a cohesive view of risk, priorities, and implementation sequencing. Communicate complex technical and regulatory matters in clear business terms.

Guide clients from assessment and roadmap development through control design, remediation, implementation, adoption, and sustainment rather than limiting delivery to point-in-time findings. Oversee the development of high-quality deliverables, including program charters, integrated plans, risk and issue logs, executive dashboards, roadmaps, target operating models, implementation plans,



and governance materials. Coach and develop engagement teams, delegate effectively, provide timely feedback, and build repeatable program delivery practices that improve quality and scalability.

Demonstrated experience leading large-scale, multi-workstream assessments, transformations, or implementations for large and complex organizations. Proven ability to manage integrated program plans, budgets, resources, dependencies, risks, issues, deliverables, and executive reporting across concurrent workstreams.

Experience coordinating cross-functional teams that may include cybersecurity, technology, risk, compliance, internal audit, legal, privacy, business operations, and third-party vendors. Robust cybersecurity advisory experience in areas such as cyber risk and maturity, governance and compliance, security program design, resilience, third-party risk, cloud security, digital identity, data protection, security operations, or GRC technology. Working knowledge of major cybersecurity and regulatory frameworks, such as NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, FFIEC, GLBA, NYDFS Part 500, DORA, PCI DSS, HIPAA/HITECH, HITRUST, or similar requirements.

Demonstrated ability to build trusted client relationships, manage challenging stakeholder dynamics, and communicate effectively with executive and technical audiences. Excellent written, verbal, facilitation, and presentation skills, including the ability to translate technical issues into business risk, decisions, and action plans. Ability to travel up to 30% based on client and engagement needs.

Bachelor's degree in cybersecurity, information systems, computer science, business, risk management, or a related field. 7-10 years of relevant cybersecurity, technology risk, consulting, or program delivery experience, including responsibility for complex client engagements.

Experience delivering cybersecurity programs for large financial services organizations, including regional or global banks, insurers, asset managers, payments companies, or other regulated financial institutions.

Experience supporting private equity sponsors and portfolio companies, including cyber due diligence,



post-close remediation, portfolio-wide assessments, program transformation, or recurring advisory services.

Experience leading enterprise-wide or multi-entity programs involving multiple business units, geographies, legal entities, portfolio companies, or regulatory jurisdictions.

Experience orchestrating cybersecurity technology implementations or complex remediation programs involving platforms such as ServiceNow, AuditBoard, Archer, MetricStream, OneTrust, SailPoint, CyberArk, Okta, Microsoft, AWS, or Azure.

Experience with project or program management methodologies and tools, including governance design, dependency management, benefits tracking, change management, and executive portfolio reporting.

Experience in a professional services firm, large consultancy, financial institution, private equity environment, or similarly complex client-service organization. Demonstrated ability to identify follow-on opportunities while maintaining a client-first focus on quality, outcomes, and long-term relationships. CISSP, CISA, CISM, or comparable cybersecurity certification.

PMP, CAPM, PgMP, SAFe, Agile, or comparable program or project management certification. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs. sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); national origin; physical or mental disability; medical condition (including family and medical leave); domestic violence victim status; Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities.

At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance. #

📌 Advisory Manager - Cyber Strategy (Winnipeg)
🏢 RSM Canada
📍 Winnipeg