Cyber Security Principal Consultant
As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.
Make an Impact at RSM UK
At RSM, our consulting team brings together diverse advisory experts to deliver our six core solutions: business transformation, forensic, deal services, restructuring, finance function support, and risk and governance.
Our solutions are designed to address the unique needs, challenges, and opportunities our clients face as they strive to achieve their aspirations and organisational goals. Whether it’s supporting global expansion, developing acquisition strategies, facilitating private equity investments, or collaborating with boards to manage risk and governance, our consulting experts work as one cohesive team. We prioritise simplicity, providing data-driven insights, value-added assurance, and high-quality execution to empower our clients in building sustainable, future-fit businesses.
It’s an exciting time to join our consulting team, as we embark on ambitious growth plans that promise to create diverse career opportunities. We are committed to enhancing our six solutions, expanding and developing our team of expert consultants, embracing a digital-first approach, strengthening our global presence, and building strong client relationships.
As a Principal Consultant, specialising in Cyber Security within Technology Risk Assurance, you will be responsible for assisting in managing, delivering and leading cyber engagements across a diverse portfolio of clients across the breadth of the mid-market, ensuring both excellent client service and identification of further work opportunities. The role will involve managing the delivery of agreed work activities with a primary focus on technical security including offensive security services.
You'll make an impact by:
* Delivering cyber security engagements, from scoping through to delivery, debriefs and report writing.
* Contributing towards the development of exciting new market facing cyber security products and services and our internal knowledge sharing hubs.
* Supporting the development of other members of the team.
* Representing RSM in external meetings, including attendance at client workshops, audit committees, and regional networking events.
* Building trusted relationships with senior client stakeholders and identifying client and service opportunities.
What we are looking for:
Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!
We value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:
* Experience of working in professional services firms.
* Demonstrable experience of delivering and leading cyber security advisory and offensive security testing engagements.
* Demonstrable experience of delivering advisory engagements relevant to security operations and defensive controls.
* Understand technology trends, cyber threats, and industry issues.
* Proficient in report writing.
* Experience with security testing techniques such as threat modelling, reconnaissance, social engineering, enumeration, attack path mapping, exploitation, and clean up from a variety of adversarial perspectives (white/grey/black box testing).
* Proficient in infrastructure and web application testing, with experience in API testing desirable.
* Proficient in using common commercial and open-source penetration testing tool sets including Kali Linux, Metasploit, Nmap, BurpSuite, Nessus and other industry standard tools.
* Hold an industry recognised certification (this can be at any level from Offensive Security Certified Professional (OSCP); CompTIA PenTest+; CHECK, CREST).
* Motivated to lead with purpose, innovate, and make a genuine lasting impact.
* Takes responsibility for work tasks and quality, managing own workload and deadlines under supervision.
What we can offer you:
We recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.
* Hybrid working.
* 26 Days Holiday.
* Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP.
* Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team