Manager - Cyber Security

BNC has been mandated to recruit an experienced Manager - Cyber Security to lead the development, implementation, and execution of cutting- edge security initiatives for our clients for consulting company. As part of the RSM US Risk Consulting team, you will be responsible for managing a range of security- related projects, performing advanced security testing, and providing strategic recommendations to improve the security posture of our clients' environments. The role requires a mix of technical expertise, leadership, and communication skills to deliver results that drive meaningful change.

Key Responsibilities:

1. Service Development & Delivery:

- Develop an understanding of RSM US Risk Consulting service offerings, methodologies, and tools.

- Perform security analysis and testing to assess the strengths and weaknesses of client IT environments using commercial and open- source security testing tools.

- Conduct Internet penetration testing (black- box, grey- box, and white- box), network architecture reviews (manual and automated), and other specialized testing tasks such as wireless penetration testing, social engineering, and mobile application testing.

2. Client Engagement & Reporting:

- Assist in developing and delivering clear, actionable remediation recommendations for identified findings.

- Articulate findings and present them effectively to senior management and clients, both in written reports and verbal communications.

- Identify areas for improvement in client environments and work with clients to address vulnerabilities and risks.

- Supervise and provide engagement management for other team members working on security engagements.

- Foster strong client relationships, ensuring engagement goals and expectations are met, and that clients receive superior service.

3. Team Leadership & Mentorship:

- Provide leadership and mentorship to junior staff, positively engaging, motivating, and influencing them to grow their skills and capabilities.

- Collaborate effectively with internal teams and stakeholders, ensuring alignment with project goals and client expectations.

- Maintain high standards of quality and client satisfaction while managing multiple projects simultaneously.

4. Professional Development & Innovation:

- Stay up- to- date with the latest trends, tools, and techniques in the cybersecurity industry by reading industry publications and attending relevant professional events.

- Continuously share insights and new findings with clients to help them understand emerging threats and evolving security needs.

Qualifications:

- Bachelor's or Master's degree in Computer Science or related field.

- Minimum of 8 years of experience in the cyber security domain, including technical experience in networking, system administration, and security testing.

- In- depth knowledge of TCP/IP and hands- on experience with operating systems (Windows, Linux, Solaris, AIX, etc.).

- Proficient in scripting languages such as Perl, Python, Bash, or C.

- Extensive experience with firewalls, routers, switches, VPNs, and related network security infrastructure.

- Familiar with security frameworks such as OWASP, OSSTMM, PTES, NIST SP800- 115, etc.

- Experience with security testing techniques including threat modeling, vulnerability scanning, penetration testing, fuzzing, password cracking, and more.

- Proficiency with commercial and open- source security tools (e.g., Nessus, Nexpose, Qualys, Kali Linux suite, Metasploit, Burp Suite, Wireshark, etc.),

- One or more of the following testing certifications: Certified Ethical Hacker (CEH); GIAC Certified Penetration Tester (GPEN); Offensive Security Certified Professional (OSCP); or equivalent development or testing certification (ECSA, CEPT, CPTE, CPTS, etc)

- In addition, one or more of the following governance certifications is preferred: Certified Information Systems Security Professionals- (CISSP- ); Certified Information Systems Auditor- (CISA- ); Certified Information Security Manager- (CISM- )

Skills & Competencies:

- Strong leadership and communication skills with the ability to effectively present technical findings to senior leadership.

- High level of integrity and confidentiality.

- Ability to write high- quality, publication- level reports and documents.

- Proactive, analytical thinker with a keen eye for identifying security risks and vulnerabilities.

- Ability to balance technical depth with business acumen and client- facing skills.