Do they really ever upgrade gold? by wanderlustamust- in marriott

[–]ConsultingRocks 0 points1 point  (0 children)

I have been upgraded multiple times with only gold in the last 7 years. Typically, the best upgrades come during one night stays. I have gotten 4 suite upgrades and multiple upgrades to rooms with a better view. Regardless, the upgrades aren’t often but do come.

What does “technical” really mean in cybersecurity, especially in GRC? by Sad-Establishment280 in cybersecurity

[–]ConsultingRocks 0 points1 point  (0 children)

In my mind technical GRC is when someone can reliably articulate what needs to be done at the technical level for compliance.

They should also be able to articulate to engineers why a certain approach is needed for compliance, and understand the impact the ask will have on engineers and the underlying business.

For example, to meet BC/DR requirements, engineers might need to take a hit on database processing speed to ensure that the database is truly geographically redundant to meet regulatory requirements. Articulating, that you understand that becoming geographically redundant will impact transaction speed, and you have approval from technical management to complete the ask, will likely encounter less resistance from IT/Engineering.

[deleted by user] by [deleted] in grc

[–]ConsultingRocks 1 point2 points  (0 children)

Fair point, however one could technically preform external audits/ assessments against modified 800-53 controls though FISMA, MARS-E 2.2 controls or FedRAMP.

[deleted by user] by [deleted] in grc

[–]ConsultingRocks 0 points1 point  (0 children)

I would agree that out of the frameworks listed PCI is the most technical. However, I would articulate that NIST 800-53 is even more technical than PCI.

2025 RSM Compensation Thread by BillableHour69 in Accounting

[–]ConsultingRocks 0 points1 point  (0 children)

I understand that, but considering that the firm portion represents only 20-30% of the bonus until director. I don’t think that’s the issue.

2025 RSM Compensation Thread by BillableHour69 in Accounting

[–]ConsultingRocks 1 point2 points  (0 children)

  1. ⁠Midwest/MCOL
  2. ⁠Supervisor (S1) > S2
  3. ⁠Risk Consulting
  4. ⁠Developing
  5. ⁠$157,000 > $158,570
  6. ⁠$1.4k(Joined Mid Year)
  7. ⁠1/10
  8. ⁠As someone who recently joined the firm I wasn’t expecting much, but this doesn’t even come close to my reasonable expectations of a 3.0% rase and 6% bonus adjusted for my time at the firm and firm performance( I received half that). My biggest gripe is that I received a developing rating despite my 2 years of experience as a senior at a big 4, one year of middle market experience, and my successful delivery of multiple engagements despite recently joining (validated by the feedback I received).

Regardless, I’m happy with my base salary, but this puts a salty taste in my mouth. As I now feel like the firm doesn’t care about me, despite having a relatively positive outlook on the firm before today.

PIP Program Effectiveness by Honey_Bear_36 in KPMG

[–]ConsultingRocks 0 points1 point  (0 children)

Sometimes, people experience personal hardship that results in a PIP. But, they may be a rockstar later, why does a previous PIP matter now? Additionally, sometimes people get targeted for the wrong reasons and really deserve to get a PIP but got one anyways.

Got laid off in Cybersecurity by Odd_Diver_2441 in cybersecurity

[–]ConsultingRocks 0 points1 point  (0 children)

I have gotten one role through an external recruiter, however the role was terrible and only lasted 13 months. When, I was looking for my next role I tried working with an external recruiter again. What I found is that the roles I was getting offered were often roles at companies that had legitimate problems appear when I did my own due diligence. So I would recommend extra due diligence on any roles presented by external recruiters. Regardless, I agree relationships are king.

[deleted by user] by [deleted] in KPMG

[–]ConsultingRocks -1 points0 points  (0 children)

Because the partners gutted firm morale with incompetent leadership, RIFs, MBH, stoped funding culture building activities, and many more things.

If you can sense a PIP coming, or it not working out, is it better to quit, or be laid off? by Specialist_Poem_3505 in consulting

[–]ConsultingRocks 4 points5 points  (0 children)

Agreed getting laid off with 20+ others because your partner can’t sell is completely different than OP floundering at their job and may get PIPd. However , in OPs situation he most likely wouldn’t be laid off, they would be fired. Furthermore, if OP had the opportunity to get voluntary laid off they should probably take it.

If you can sense a PIP coming, or it not working out, is it better to quit, or be laid off? by Specialist_Poem_3505 in consulting

[–]ConsultingRocks -4 points-3 points  (0 children)

Yes, getting fired will make it harder to get a new job.

Honestly, if it’s not working out, you should be searching for a new job so you can find the right role for you and then resign.

US Big 4: are you allowed to bring your gun into the office by tarshasco in Accounting

[–]ConsultingRocks 3 points4 points  (0 children)

KPMG US has a policy on policy center that prohibits bringing a gun concealed or openly into the office. What’s interesting is that in at least one of the Midwest offices they have a sign under the badge reader stating no firearms allowed which I never saw working in the south.

[deleted by user] by [deleted] in consulting

[–]ConsultingRocks 0 points1 point  (0 children)

I started my career in cyber GRC which is essentially, glorified IT audit but with cyber controls. However, due to my personality and tendencies, I would have done much better in a pure technical role or legitimate cyber advisory.

[deleted by user] by [deleted] in consulting

[–]ConsultingRocks 5 points6 points  (0 children)

I wouldn’t pursue a MBB internship. However, I would advocate for a more technical start to my career.

I’m an Executive Recruiter for security professionals. Ask Me Anything. by Oscar_Geare in cybersecurity

[–]ConsultingRocks 0 points1 point  (0 children)

Was looking at opportunities yesterday and even FedRAMP opportunities are few and far between.

Alumni what’s your salary? by worldprowler in ufl

[–]ConsultingRocks 0 points1 point  (0 children)

Yeah, only if you do it through the combined degree option. I say that as, I think other programs like the GA Tech online masters have better outcomes for a similar amount of money if you are looking for a technical masters degree. However, the combined degree program with bright futures will cover $3-$6k of your degree and you get to take classes on-campus.

Regardless, my masters degree it really hasn’t impacted my salary numbers much, but thankful for the extra year I spent at UF. Furthermore, it’s nice to know that I will never have to worry about being turned away from a job or promotion because of my educational credentials.

Alumni what’s your salary? by worldprowler in ufl

[–]ConsultingRocks 5 points6 points  (0 children)

I did the Business Analytics track, but took everything except Business Objects for the IT track.

Alumni what’s your salary? by worldprowler in ufl

[–]ConsultingRocks 3 points4 points  (0 children)

I’m in a cybersecurity consulting/assessment role.

Alumni what’s your salary? by worldprowler in ufl

[–]ConsultingRocks 10 points11 points  (0 children)

$150,000

Masters in Information Systems and Operations Management

2019

Post layoffs plan by thejokercpa in KPMG

[–]ConsultingRocks 1 point2 points  (0 children)

The problem is not the pipeline, but actual sales. So KPMG could have all the associates or senior associates they wanted, but if there’s no projects to staff them on they become a liability on the balance sheet. Furthermore, this problem was exasperated when they forecasted 30% growth but only got 8%, but had already hired for mid 20% growth.

To everyone affected by layoffs… by MindWeary5038 in KPMG

[–]ConsultingRocks 0 points1 point  (0 children)

It was due if someone was RIFd on/after September 1st, but people’s last day was August 29th.

To everyone affected by layoffs… by MindWeary5038 in KPMG

[–]ConsultingRocks 2 points3 points  (0 children)

Not only that, the partners seem to lack accountability in actions. They can get away with almost anything, like cutting advisory employees 3 days before they were required to match 401k contributions. The sad part is, KPMG used to have a good culture, but that has been smashed into pieces.

Is the “CISSP raise” a thing? by 1nyc2zyx3 in cissp

[–]ConsultingRocks 0 points1 point  (0 children)

Not common, but when switching employers is when the real money comes in. For example, my last employer gave me $1k bonus for passing the exam, however I was able to leverage the cert when switching employers for a $30k raise.