Compliance Assessment - Senior Consultant

Deloitte’s
Cyber
security
Services
help
our
clients
to
be
secure,
vigilant,
and
resilient
in
the
face
of
an
ever-increasing array of cyber threats and vulnerabilities. Our Cybersecurity practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent
manner.
Our
services
help
organizations
to
address,
in
a
timely
manner,
pervasive
issues,
such
as
identity theft, data security breaches, data leakage, and system outages across organizations of diverse sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.
Work
you will
do
As
a
professional
working
for
Cyber
Strategy
&
Transformation
you will
build
and
nurture
positive
working
relationships
with clients with the intention of exceeding client expectations. You will:
·
Perform comprehensive assessments of the management, operational, and technical security controls and
control enhancements employed within or inherited by an information technology (IT) system, Artificial Intelligence (AI) system, and Operational Technology (OT) system to determine the overall effectiveness of the controls in accordance with industry standards and frameworks
·
Prepare, review, and analyze documents such as Plans of Actions and Milestones (POAMs), Security Assessment Reports (SAR), Security Assessment Plans (SAP)
·
Develop and implement AI Security Framework standardizing security/privacy integration into AI/ML-powered applications
·
Design secure reference architectures for AI-enabled systems, incorporating guardrails and runtime protections
·
Integrate AI security controls into enterprise architecture, including encryption, access management, and adversarial robustness measures
·
Draft and maintain AI security policies covering data privacy, bias mitigation, and explainability
·
Monitor compliance of AI systems with global regulations (NIST AI RMF, ISO 42001, EU AI Act) and internal governance standards
·
Manage
and
execute
cyber
risk
engagements
across
the
development
lifecycle –
strategy,
design, implementation, and managed services
·
Facilitate
enterprise
decision
making
by
providing
a
holistic
view
of
enterprise
-wide
cyber
risk,
assessing
the level of risk, and providing input into the management of risk
·
Develop
and
tailor
approaches,
methods,
and
tools
to
support
clients
cyber
risk
programs
and
initiatives
·
Strategically drive the development and execution of risk assessments and mitigation plans to enhance the client's ability to identify, evaluate, prioritize, and mitigate risks
·
Design and develop cyber security strategies and programs for large and complex organizations adhering to industry standards and frameworks
·
Assess, develop, and implement cyber security programs, including organizational design, cyber resilience, and other key processes for our clients
·
Review
clients’
cyber
posture,
strengths,
and
weaknesses
in
the
context
of
business
environment,
goals,
and objectives. Develop prioritized recommendations based on gaps and clients’ priorities and
constraints
·
Drive
organizational
changes
and
establish
governance
structures
to
achieve
cyber
goals
and
objectives
·
Develop impactful reports and presentations that support the achievement of engagement goals and objectives
·
Work with senior management stakeholders to define and implement overall future state philosophy and capabilities for the clients’ cyber security programs
·
Lead project workstream and manage deliverables from inception to delivery, ensuring timelines, and quality standards are met
·
Perform peer reviews and mentor team members
The
Team
Deloitte’s Cyber Strategy and Transformation practice is focused on helping our clients to design and implement transformational programs to reduce and manage cyber threats. We help our clients to define their overall cyber strategy, design global, pan-enterprise programs that focus on mitigating threats, evaluating their objectives, priorities, strengths, and weaknesses, and roll out large scale organizational changes to achieve goals.
Qualifications
and
Experience
Required:
·
Bachelor’s
degree
in
information
technology
or
related
field
·
5-9
years
of
information
security
experience
·
Excellent
communication (v
erbal
and
written)
and interpersonal skills
·
Proficiency in Microsoft Office (Excel, PowerPoint, and Word)
·
Hands-on experience working with industry
standards
and
frameworks
(e.g.,
ISO 27001,
NIST, HIPAA, FedRAMP, PCI)
·
Foundational understanding of AI/GenAI security frameworks (e.g., NIST AI RMF, ISO 42001, EU AI Act)
·
Understanding
of security requirements, contributions to security design and hands-on implementation of multiple security technologies and capabilities
·
Hands-on experience developing cyber security policies and standards
·
Hands-on experience working with stakeholders in identifying, prioritizing, and developing plans and roadmaps for cyber security programs
·
Broad domain knowledge and strong understanding of three or more cyber security domains including (but not limited to):
·
Cyber
risk
strategy
·
Cyber security maturity assessments
·
Cyber
security
operations
·
Security
architecture
·
Data
protection and privacy
·
Application
security/SDLC
·
Cloud
security
·
Cloud infrastructure security
·
Incident
r
esponse
·
Cyber
resilience
·
Zero Trust
Preferred:
·
B.E.
/
B. Tech
+
MBA
(Preferred)
·
CISSP
/
CISM
(or
equivalent)