Enterprise Chief Information Security Officer

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally.

There’s no one like you and that’s why there’s nowhere like RSM.The Chief Information Security Officer (CISO) is responsible for the mission, vision, strategy, and execution of the organization’s global cybersecurity program. The CISO serves as the senior global cybersecurity leader, accountable for setting enterprise priorities, advising executive and board stakeholders on material cyber risk, and ensuring cybersecurity risk management supports business outcomes across regions, markets, and functions.

This role leads through influence across cultures, jurisdictions, and business environments; establishes consistent global operating expectations; and guides coordinated strategy, execution, and response across distributed teams. The CISO partners with technology, operations, legal, compliance, and business leaders to protect information assets, maintain regulatory alignment, support client and business requirements, and strengthen the organization’s global security posture.

Core responsibilities include:

Set, communicate, and champion the global cybersecurity vision, strategy, and priorities, ensuring consistent direction and execution across regions while accounting for local regulatory, client, and business requirements.

Advise executive leadership and board stakeholders on material cybersecurity risks, program effectiveness, risk-based investment decisions, and the business impact of security strategies, policies, and controls.

Lead global cybersecurity crisis response for material incidents, regulatory inquiries, client requirements, and emerging risks, serving as the senior decision-maker for escalation, cross-border coordination, stakeholder alignment, and timely executive communications.

Establish and maintain cybersecurity governance for information ownership, classification, protection, and risk-informed decision-making.

Guide the secure adoption of emerging technologies and prepare the organization for evolving cybersecurity risks and cryptographic requirements.

Oversee governance, risk, and compliance activities, including applicable certifications, regulatory requirements, industry standards, and significant third-party and internal cybersecurity audits.

Lead the continued maturity and resiliency of the cybersecurity function through an agile program that supports business objectives.

Build, lead, coach, and enable high-performing global cybersecurity teams by establishing clear operating models, decision rights, escalation paths, leadership routines, and accountability across distributed functions, regions, and time zones.

Develop global cybersecurity leadership capability through consistent standards, knowledge sharing, inclusive leadership practices, and succession readiness.

Manage the cybersecurity budget, establish priorities, and secure support for key initiatives.

Establish metrics, reporting, and governance forums that communicate global cybersecurity program effectiveness, enterprise risk posture, regional considerations, and business value to executive and board stakeholders.

Build alignment with technology and business leaders to incorporate cybersecurity requirements into organizational architecture and decision-making.

Maintain external relationships with global peers, partners, vendors, regulators, and industry groups to address…