Join Deloitte's Cyber CST team as a Manager in Third-Party Risk Management. You will play a crucial role in helping organizations prevent cyberattacks and protect their valuable assets by embedding cyber risk into strategy development. This position offers a dynamic environment to manage information and technology risks effectively and uncover new opportunities.

As part of our Cybersecurity practice, you will contribute to building secure, vigilant, and resilient organizations. We focus not only on preventing and responding to threats but also on managing cyber risk to enable business growth and innovation.

Lead comprehensive Third-Party Risk Management (TPRM) engagements, serving as the subject matter expert and providing essential framework guidance. You will manage client interactions, facilitate workshops, and conduct thorough risk reviews. Developing and overseeing risk scoring models and dashboards will be key, alongside driving remediation planning and risk mitigation activities. Your role will also involve supporting proposals, RFP responses, and client presentations. Utilize TPRM tools such as ServiceNow, Archer, and ProcessUnity, and ensure adherence to regulatory requirements like DORA and FedRAMP. Oversee privacy risk assessments and manage control testing activities for third-party engagements. Provide executive-level reporting on risk assessment results and mentor team members to ensure high-quality project delivery.

We are seeking a Manager with deep expertise in third-party risk management, IT security, and compliance, complemented by strong stakeholder management and leadership capabilities. Essential knowledge includes security frameworks such as ISO 27001, NIST, and regulatory standards like GDPR, DORA, and FEDRAMP. Practical experience with TPRM tools is required, along with familiarity with privacy frameworks and data protection. A Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is necessary, coupled with 7-10 years of relevant experience in cybersecurity consulting, risk management, and compliance. Excellent analytical and communication skills are paramount.