
Senior Associate – Risk Management Analyst
RSM US LLP
full-time
Posted on:
Location Type: Hybrid
Location: Harrisburg • North Carolina • Ohio • United States
Visit company websiteExplore more
Salary
💰 $85,100 - $161,700 per year
Job Level
Tech Stack
About the role
- Conduct regular vulnerability assessments and scans to identify potential security weaknesses in systems, applications, and networks.
- Administer vulnerability management and automated patching SaaS applications.
- Analyze and prioritize vulnerabilities based on risk assessment, potential impact, and exploitability, utilizing critical thinking to make informed decisions.
- Collaborate with managed and client IT teams to support remediation of identified vulnerabilities.
- Collaborate with SOC, engineering, and service delivery teams to respond to requests and help advise on various technical matters including vulnerabilities, emerging threats and technologies, and solutions for common problems related to current processes.
- Monitor and evaluate emerging threats in the cybersecurity landscape, adapting strategies as necessary.
- Prepare and present reports on vulnerability status, trends, and remediation progress to stakeholders, using clear and concise communication.
- Assist in the development and implementation of security policies, standards, and procedures related to vulnerability management and patching.
- Participate in incident response activities as needed, providing insights and analysis to support investigations.
- Leverage data analytics platforms to create reports, query emerging threats and analyze trends to help minimize risk and improve posture across a large client base.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 3-5 years of experience in information technology, cybersecurity, or a related field.
- Strong understanding of vulnerability assessment tools and methodologies (e.g., Nessus, Qualys, Rapid7).
- Experience with data analytics platforms (eg. PowerBI) and structured data sets.
- Experience with cloud platforms (AWS, Azure) is a plus.
- Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls) is a plus.
- Relevant certifications (e.g., Sec+, AWS Cloud Practitioner) are a plus.
Benefits
- Competitive benefits and compensation package
- Flexibility in your schedule
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
vulnerability assessmentrisk assessmentdata analyticsincident responseautomated patchingsecurity policy developmentthreat analysisexploitability analysisvulnerability managementcloud computing
Soft Skills
critical thinkingcollaborationcommunicationpresentation skillsproblem-solvinganalytical skillsdecision-makingorganizational skillsadaptabilitystakeholder engagement
Certifications
Sec+AWS Cloud Practitioner