Cyber Security & Risk Strategy Consultant

About the Role

As a Consultant, Strategy, Growth & Transformation on the Cyber Strategy team at Deloitte, you will support cyber strategy engagements and deliver powerful solutions to help clients navigate the threat landscape.

Key Responsibilities

• Support cyber strategy engagements, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives.
• Provide PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs, and coordinating cross-functional workstreams.
• Assist in the development of methods, templates, and deliverables for cyber strategy, assessment, and transformation services.
• Assess client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes.
• Support the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions.
• Collaborate with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagements.
• Deliver project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements.

Requirements & Tech Stack

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.
• Cyber risk or maturity assessments.
• Operating model design.
• Program/project management for cyber or technology initiatives.
• Cyber assessments or security frameworks, including NIST CSF, NIST SP 800-53, or ISO 27001.
• Amazon Web Services (AWS) or Microsoft Azure.
• Governance, risk, and compliance tools.
• Identity and access management solutions.
• Security information and event management platforms.
• Data loss prevention solutions.

Qualifications

• Bachelor's degree.
• 2+ years of experience in cyber security, information security, or technology risk.
• 2+ years of experience in consulting, global system integrators, or large enterprise project teams.
• Ability to travel 50%, on average.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field.
• Professional certifications such as CISSP, CISM, CISA, CEH, ITIL, PMP, or CIPM.
• Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals.
• Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts, and Integrations expertise and support.
• Experience collaborating with finance, human resources, information technology, and other business workstreams.
• Experience supporting PMO functions, including program governance, status reporting, and stakeholder management.
• Experience designing or implementing target operating models, including organizational design and process reengineering.