Don't need a router on-top of a router (assuming the modem currently connecting is one also).
You need a Wireless Access Point which does exactly what it says on the tin. While sitting behind a hardware firewall/NAT is preferential it's not ESSENTIAL assuming you have a decent software firewall enabled. In which case a Wireless Access Point will 'do the job' whatever the modem is, has, or does not have.