Cyber Security & Risk Strategy Consultant

About the Role

Join the Deloitte Cyber team to deliver powerful solutions that help clients navigate the ever-changing threat landscape, operate with resilience, grow with confidence, and proactively manage for success.

Key Responsibilities

• Support cyber strategy engagements, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives.
• Provide PMO support for cyber and technology programs, tracking milestones, maintaining RAID logs, and coordinating cross-functional workstreams.
• Assist with the development of methods, templates, and deliverables for cyber strategy, assessment, and transformation services.
• Assess client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes.
• Support the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions.
• Collaborate with client stakeholders and cross-functional Deloitte teams on assessment, operating model, and transformation engagements.
• Deliver project work through research, analysis, documentation, recommendations, and implementation support.

Requirements & Tech Stack

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Qualifications

Required

• Bachelor's degree.
• 2+ years of experience in cyber security, information security, or technology risk.
• 2+ years of experience in consulting, global system integrators, or large enterprise project teams.
• Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives.
• Experience with cyber assessments or security frameworks, including NIST Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001.
• Ability to travel 50%, on average.

Limited immigration sponsorship may be available.

Preferred

• Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field.
• Professional certifications such as CISSP, CISM, CISA, CEH, ITIL, PMP, or CIPM.
• Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals.
• Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations.
• Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions.
• Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices.
• Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives.
• Experience supporting PMO functions, including program governance, status reporting, and stakeholder management.
• Experience designing or implementing target operating models, including organizational design and process reengineering.