Cyber Security & Risk Strategy Consultant
Deloitte · Tampa, FL · 1 mo ago
Hybrid$83k–$163k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes intro paragraph about Deloitte Cyber team, then "Work you'll do" (responsibilities), then "A successful candidate would possess these skills:" (skills), then "The team" (maybe about team), then "Qualifications Required:" and "Preferred:" (qualifications). Also wage range and incentive program (Pay). No schedule or benefits mentioned. So we need sections: About the role? Could combine intro as About the role? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should include sections only when posting has real specific content. We have content for About the role (intro paragraph). Responsibilities (Work you'll do). Skills (A successful candidate would possess these skills). Qualifications (Required and Preferred). Pay (wage range and incentive). No Benefits, Schedule. Also maybe "The team" could be part of About the role or separate? Could be "About the team" but not in list. Probably incorporate into About the role or maybe a separate section "Team". But not in allowed headings list; we could still use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should include sections only when posting has real specific content. We have content for About the role (intro paragraph). Responsibilities (Work you'll do). Skills (A successful candidate would possess these skills). Qualifications (Required and Preferred). Pay (wage range and incentive). No Benefits, Schedule. Also maybe "The team" could be part of About the role or separate? Could be "About the team" but not in list. Probably incorporate into About the role or maybe a separate section "Team". But not in allowed headings list; we could still use for any heading but they gave examples. Safer to stick to given headings. Could treat "The team" as part of About the role. We'll include About the role (intro + team description). Responsibilities (Work you'll do). Skills (list). Qualifications (Required and Preferred). Pay (wage range and incentive). Use - for lists. For responsibilities we have a paragraph with multiple sentences separated by line breaks? The text: "Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiativesProviding PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreamsAssisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation servicesAssessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processesSupporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functionsCollaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagementsDelivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements"
We need to split into list items. Each sentence seems to start with a verb. We'll split at each capital letter after a period? Actually there are no periods, just concatenated. We'll manually split based on the phrases:
- Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives
- Providing PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreams
- Assisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation services
- Assessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes
- Supporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions
- Collaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagements
- Delivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements
We'll make
- for each.
Skills list: "Ability to work independently and collaborate as part of a teamEffective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to provide clear guidance to others"
Split similarly:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications Required: list items:
- Bachelor's degree
- 2+ years of experience in cyber security, information security, or technology risk
- 2+ years of experience in consulting, global system integrators, or large enterprise project teams
- Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives
- Experience with cyber assessments or security frameworks, including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred: list items:
- Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), ITIL, Project Management Professional (PMP), or Certified in Privacy Information Management (CIPM)
- Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals
- Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations expertise and support
- Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions
- Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices
- Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives
- Experience supporting PMO functions, including program governance, status reporting, and stakeholder management
- Experience designing or implementing target operating models, including organizational design and process reengineering
Pay: wage range and incentive program. We'll put in
maybe with two sentences.
We must not include boilerplate like recruitment end date? That's minor metadata; we can fold into short
or drop. The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. The recruiting end date is minor metadata; we could include in a short
maybe under About the role? But better to drop it as it's not substantive? It's a date; maybe we can include in a short
under About the role. However they said preserve ALL substantive information; do NOT invent or summarize away detail. The end date is substantive? It's metadata about recruiting; maybe we can keep it as a short paragraph. But they said fold minor metadata into a short
or drop it. So we can include a short
with that info.
We must not include cookie/navigation/legal/EEO etc. Not present.
Now produce HTML fragment: start with maybe but not required. Just output headings and content.
Structure:
About the role
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
The team Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Recruiting for this role ends on 05/31/2027.
Responsibilities
- Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives
- Providing PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreams
- Assisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation services
- Assessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes
- Supporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions
- Collaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagements
- Delivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements
Skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications
Required
- Bachelor's degree
- 2+ years of experience in cyber security, information security, or technology risk
- 2+ years of experience in consulting, global system integrators, or large enterprise project teams
- Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives
- Experience with cyber assessments or security frameworks, including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred
- Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), ITIL, Project Management Professional (PMP), or Certified in Privacy Information Management (CIPM)
- Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals
- Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations expertise and support
- Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions
- Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices
- Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives
- for lists. For responsibilities we have a paragraph with multiple sentences separated by line breaks? The text: "Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiativesProviding PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreamsAssisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation servicesAssessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processesSupporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functionsCollaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagementsDelivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements"
We need to split into list items. Each sentence seems to start with a verb. We'll split at each capital letter after a period? Actually there are no periods, just concatenated. We'll manually split based on the phrases:
- Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives
- Providing PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreams
- Assisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation services
- Assessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes
- Supporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions
- Collaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagements
- Delivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements
We'll make
- for each.
Skills list: "Ability to work independently and collaborate as part of a teamEffective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to provide clear guidance to others"
Split similarly:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications Required: list items:
- Bachelor's degree
- 2+ years of experience in cyber security, information security, or technology risk
- 2+ years of experience in consulting, global system integrators, or large enterprise project teams
- Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives
- Experience with cyber assessments or security frameworks, including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred: list items:
- Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), ITIL, Project Management Professional (PMP), or Certified in Privacy Information Management (CIPM)
- Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals
- Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations expertise and support
- Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions
- Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices
- Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives
- Experience supporting PMO functions, including program governance, status reporting, and stakeholder management
- Experience designing or implementing target operating models, including organizational design and process reengineering
Pay: wage range and incentive program. We'll put in
maybe with two sentences. We must not include boilerplate like recruitment end date? That's minor metadata; we can fold into short
or drop. The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. The recruiting end date is minor metadata; we could include in a short
maybe under About the role? But better to drop it as it's not substantive? It's a date; maybe we can include in a short
under About the role. However they said preserve ALL substantive information; do NOT invent or summarize away detail. The end date is substantive? It's metadata about recruiting; maybe we can keep it as a short paragraph. But they said fold minor metadata into a short
or drop it. So we can include a short
with that info. We must not include cookie/navigation/legal/EEO etc. Not present. Now produce HTML fragment: start with maybe but not required. Just output headings and content. Structure:
About the role
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
The team Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.
Recruiting for this role ends on 05/31/2027.
Responsibilities
- Supporting cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives
- Providing PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross-functional workstreams
- Assisting with the development of methods, templates, and deliverables that support cyber strategy, assessment, and transformation services
- Assessing client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes
- Supporting the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions
- Collaborating with client stakeholders and cross-functional Deloitte teams to support assessment, operating model, and transformation engagements
- Delivering project work through research, analysis, documentation, recommendations, and implementation support across domestic and global engagements
Skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications
Required
- Bachelor's degree
- 2+ years of experience in cyber security, information security, or technology risk
- 2+ years of experience in consulting, global system integrators, or large enterprise project teams
- Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives
- Experience with cyber assessments or security frameworks, including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred
- Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), ITIL, Project Management Professional (PMP), or Certified in Privacy Information Management (CIPM)
- Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals
- Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations expertise and support
- Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions
- Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices
- Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives
- for each.
Skills list: "Ability to work independently and collaborate as part of a teamEffective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to provide clear guidance to others"
Split similarly:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications Required: list items:
- Bachelor's degree
- 2+ years of experience in cyber security, information security, or technology risk
- 2+ years of experience in consulting, global system integrators, or large enterprise project teams
- Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives
- Experience with cyber assessments or security frameworks, including National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST Special Publication 800-53, or ISO 27001
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred: list items:
- Bachelor's degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), ITIL, Project Management Professional (PMP), or Certified in Privacy Information Management (CIPM)
- Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals
- Experience with Cyber Mergers and Acquisitions diligence, sign to close, carveouts and Integrations expertise and support
- Experience with governance, risk, and compliance tools, identity and access management solutions, security information and event management platforms, or data loss prevention solutions
- Experience with cloud platforms such as Amazon Web Services (AWS) or Microsoft Azure and their security practices
- Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives
- Experience supporting PMO functions, including program governance, status reporting, and stakeholder management
- Experience designing or implementing target operating models, including organizational design and process reengineering
Pay: wage range and incentive program. We'll put in