Join a leading cybersecurity team focused on safeguarding organizations and their critical assets. We champion a secure, vigilant, and resilient approach to cyber risk management, empowering businesses to innovate confidently while effectively managing information and technology threats.

Deloitte's Cybersecurity practice enables clients to embed robust cyber risk strategies from the outset, ensuring proactive protection and the effective management of associated information and technology risks. Explore the forefront of Cybersecurity solutions and discover how we empower organizations to thrive in a dynamic threat landscape.

Lead comprehensive Third-Party Risk Management (TPRM) initiatives from inception to completion. Serve as the Subject Matter Expert (SME) for TPRM, providing expert guidance on framework implementation and best practices. Facilitate client discussions, conduct workshops, and manage risk review sessions to identify and address potential vulnerabilities. Develop and maintain advanced risk scoring models and insightful dashboards to visualize and track risk posture. Spearhead remediation planning and execute effective risk mitigation strategies to strengthen defenses. Contribute to proposal development, RFP responses, and impactful client presentations to drive business growth. Drive the adoption and utilization of key TPRM tools, including ServiceNow, Archer, and ProcessUnity. Ensure strict adherence to regulatory frameworks such as DORA, FedRAMP, and other relevant compliance mandates. Oversee privacy risk assessments integral to third-party engagements, ensuring data protection. Manage IT General Controls (ITGC), PCI DSS compliance, and thorough third-party control testing activities. Analyze risk assessment outcomes and deliver clear, executive-level reporting for informed decision-making. Mentor and guide team members, fostering professional development and ensuring the delivery of high-quality project outcomes.

Possess deep expertise in third-party risk management, IT security principles, and regulatory compliance. Demonstrate practical experience with recognized standards like ISO 27001, NIST, GDPR, and other critical regulatory frameworks. Exhibit strong capabilities in stakeholder management, client relations, and team leadership. Familiarity with emerging regulatory landscapes, including DORA and FEDRAMP, is essential. Showcase hands-on experience with industry-standard tools commonly used in third-party risk management processes. Maintain a solid understanding of privacy frameworks and data protection requirements. Leverage strong analytical, communication, and interpersonal skills to effectively engage with diverse stakeholders. Hold a Bachelor’s or Master’s degree in Computer Science, Information Security, or a closely related technical field.