Responsibilities

• Lead the delivery and management of Identity & Access Management (IAM) engagements across multiple industries, ensuring high-quality client deliverables and successful project outcomes.
• Partner with clients to assess, design, and implement IAM strategies and solutions that strengthen identity governance, access controls, and overall security posture.
• Build and maintain trusted relationships with client stakeholders, serving as a strategic advisor on IAM best practices and cybersecurity initiatives.
• Manage and expand key client accounts while supporting business development efforts and identifying opportunities to grow IAM services.
• Conduct IAM assessments focused on identity governance, privileged access management (PAM), access reviews, authentication, authorization, and regulatory compliance.
• Evaluate clients' IAM programs against industry frameworks and standards, including NIST CSF, NIST SP 800-53, ISO 27001, FFIEC, SOX, HIPAA, and other applicable regulatory requirements.
• Develop practical remediation roadmaps and recommendations to improve identity lifecycle management, access governance, privileged access, and Zero Trust initiatives.
• Present findings, recommendations, and executive-level updates to client leadership in both written and verbal formats.
• Mentor junior team members and contribute to the continued growth of RSM's Cyber Risk Consulting practice.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
• 5+ years of experience in Identity & Access Management, Cybersecurity Consulting, Information Security, or a related discipline.
• Experience implementing or supporting IAM technologies such as SailPoint, Saviynt, Okta, Microsoft Entra ID (Azure AD), CyberArk, Delinea, Ping Identity, ForgeRock, or similar platforms.
• Strong understanding of identity governance and administration (IGA), privileged access management (PAM), identity lifecycle management, role-based access control (RBAC), access certifications, single sign-on (SSO), multifactor authentication (MFA), and directory services.
• Experience with cybersecurity governance, risk management, and regulatory frameworks including NIST CSF, NIST SP 800-53, ISO 27001, SOX, HIPAA, FFIEC, or similar standards.
• Excellent client-facing communication and presentation skills with experience delivering consulting engagements.
• Ability to collaborate across cross-functional technical and business teams.
• Willingness to travel up to 30% for client engagements.

Preferred Qualifications

• Hands-on experience with one or more leading IAM platforms, including SailPoint IdentityIQ/IdentityNow, Saviynt, CyberArk, Okta, Microsoft Entra ID, Ping Identity, ForgeRock, or Delinea.
• Experience supporting cloud identity and access management across AWS, Azure, or Google Cloud.
• Familiarity with Zero Trust architecture, identity security, privileged access strategies, and identity governance modernization initiatives.
• Relevant certifications such as CISSP, CISM, CISA, Microsoft Identity and Access Administrator (SC-300), SailPoint Certified IdentityIQ Engineer, CyberArk Defender/Sentry, Okta Certified Professional or Administrator, or other IAM-related certifications.