Deloitte Senior Manager, Technology Risk Management (Cloud) in Denver, Colorado
Deloitte Services LP includes internal support areas such as Marketing and Communications, Human Resources/Talent, Information Technology, Facilities Management, and Financial Support Services.
Senior Manager, Technology Risk Management (Cloud)
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte s Information Technology Services (ITS). We are insatiably curious and life-long learners focused on technology and innovation.
Work you ll do
Serves as the subject matter expert within the Technology Risk Management (TRM) program for cloud security and compliance within the Information Technology Services (ITS) Cyber Security team. This individual manages and continually enhances the security and cloud compliance and risk management program supporting the security interests of the firm across all primary security domains and cloud environments. The Senior Manager works with the cloud DevOps and Security teams across the firm to identify appropriate cloud compliance requirements, areas of potential risk, potential cost savings and operational efficiencies that will reduce the overall risks to client and firm data resources. The position is the primary compliance advisor to cloud DevOps and Security teams and focuses on enabling ITS to efficiently and effectively develop and deploy secured and compliant client platforms in the cloud.
May provide work leadership to other employees, as necessary.
Consults on the design and implementation of cloud security processes and controls across cloud environments.
Serves as a subject matter expert on cloud security and compliance requirements according to regulatory requirements, firm policy, data classification, client commitments, etc.
Manages and continuously updates effective risk management program and controls framework for cloud environments.
Develops and reviews / challenges risk assessments and reports on findings, consult on remediation plans, track status, aggregate results and report to Management / Leadership.
Educates DevOps, Security and Compliance teams on cloud compliance requirements and provide oversite / review for standard, policy and procedure updates.
Performs deep-dive controls testing for high risk areas for independent validation of issues and remediation efforts.
Provides significant input into the annual strategic planning and budget processes for cloud and emerging technologies.
Performs other job-related duties as assigned.
Information Technology Services (ITS) helps power Deloitte s success. ITS is the engine that drives Deloitte, which serves many of the world s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.
The 2,200 professionals in ITS deliver services including:
Security, risk & compliance
The Cyber Security team vigilantly protects Deloitte and client data. The team is responsible for a strategic cyber risk program which adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team protects the Deloitte brand.
Category: Information Technology
As used in this document, Deloitte means Deloitte LLP and its subsidiaries. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.