Cyber Security & Risk Strategy Senior Consultant

About the role

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions that help clients navigate the ever‑changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Recruiting for this role ends on 05/31/2027.

Responsibilities

• Support cyber strategy engagements across multiple service types, including cyber risk and maturity assessments, target operating model design, and technology risk initiatives.
• Provide PMO support for cyber and technology programs, including tracking milestones, maintaining RAID logs (risks, actions, issues, decisions), and coordinating cross‑functional workstreams.
• Contribute to the development of repeatable methods, templates, and capabilities that support delivery of cyber strategy, assessment, and transformation services.
• Assess client cyber and information technology environments, including infrastructure, databases, applications, workflows, and business processes.
• Support the design of target operating models, including organizational structure, governance, roles and responsibilities, and process design for cyber and technology functions.
• Collaborate with client stakeholders and cross‑functional Deloitte teams to support multi‑faceted assessment and transformation engagements.
• Deliver project work through research, analysis, recommendations, and implementation support across domestic and global engagements.

Requirements

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast‑paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.
• Ability to adapt quickly across different engagement types, client environments, and industries.

Qualifications

• Bachelor’s degree.
• 4+ years of experience in cyber security, information security, or technology risk.
• 4+ years of experience in consulting, global system integrators, or large enterprise project teams.
• Experience in one or more of the following: cyber risk or maturity assessments, operating model design, or program/project management for cyber or technology initiatives.
• Experience with cyber assessments or security frameworks, including NIST Cybersecurity Framework (NIST CSF), NIST SP 800‑53, or ISO 27001.
• Ability to travel up to 50% on average, based on client needs.
• Limited immigration sponsorship may be available.

Preferred qualifications

• Bachelor’s degree in Computer Science, Information Technology, Risk Management, Engineering, or a similar field.
• Professional certifications such as CISSP, CISM, CISA, CEH, ITIL, PMP, or CIPM.
• Experience in banking and finance, aviation, transportation, property development, or pharmaceuticals.
• Experience with cyber mergers and acquisitions diligence, sign‑to‑close, carve‑outs, and integration support.
• Experience with governance, risk, and compliance tools, identity and access management solutions, SIEM platforms, or data loss prevention solutions.
• Experience with cloud platforms such as AWS or Microsoft Azure and their security practices.
• Experience collaborating with finance, human resources, information technology, and other business workstreams during assessment, operating model, or transformation initiatives.
• Experience supporting PMO functions, including program governance, status reporting, and stakeholder management.
• Experience designing or implementing target operating models, including organizational design and process reengineering.

Compensation

The estimated salary range for this role is $105,400 to $207,800, reflecting factors such as skill set, experience, certifications, and business needs. Compensation decisions are made on a case‑by‑case basis and are not typically at the top of the range. In addition, you may be eligible to participate in a discretionary annual incentive program, subject to program rules and individual and organizational performance.